Alleged AI-Powered Call Center Breach Exposes Over 10 Million Conversations in the Middle East

October 8, 2024

An AI-powered call center platform in the Middle East has reportedly suffered a significant data breach, potentially exposing over 10 million conversations between consumers, operators, and AI agents. According to reports, attackers gained unauthorized access to the platform's management dashboard, allegedly stealing sensitive information such as national ID documents. The breach poses potential risks including phishing, identity theft, and social engineering attacks. Stolen data has reportedly been listed for sale on the dark web.

For those interested in safeguarding AI systems and promoting trustworthy AI practices, join the HISPI Project Cerebellum community to Govern, Map, Measure, or Manage such incidents. Click JOIN US to get started.

Source: [Article Link]

Matched TAIM controls

Suggested mapping from embedding similarity (not a formal assessment). Browse all TAIM controls

Alleged deployer
cybercriminals
Alleged developer
unnamed-ai-call-center-platform-provider
Alleged harmed parties
enterprise-clients, end-users-of-undisclosed-middle-eastern-ai-powered-cloud-call-center-platform

Source

Data from the AI Incident Database (AIID). Cite this incident: https://incidentdatabase.ai/cite/906

Data source

Incident data is from the AI Incident Database (AIID).

When citing the database as a whole, please use:

McGregor, S. (2021) Preventing Repeated Real World AI Failures by Cataloging Incidents: The AI Incident Database. In Proceedings of the Thirty-Third Annual Conference on Innovative Applications of Artificial Intelligence (IAAI-21). Virtual Conference.

Pre-print on arXiv · Database snapshots & citation guide

We use weekly snapshots of the AIID for stable reference. For the official suggested citation of a specific incident, use the “Cite this incident” link on each incident page.