French IP services firm Questel breached via voice phishing; ShinyHunters publishes sales data

According to CyberInsider, French intellectual property software and services firm Questel confirmed a voice phishing attack led to unauthorized access to a Sales SharePoint environment in its Microsoft 365, and some stolen data has been published ^[1]. ShinyHunters claimed over 21 million Salesforce records; Questel said it cannot confirm all claims and notified the CNIL, while XposedOrNot indexed 1,744,241 records with emails, addresses, birth dates and phone numbers ^[1][2]. XposedOrNot notes no passwords were included so the main risk is phishing, and advises being wary of emails, calls or texts quoting these details and turning on two-factor authentication ^[2].

Industries mainly affected: Professional services

1. Be wary of phishing emails, calls and texts that quote your personal details ^[2].
2. Turn on two-factor authentication .