Salt reports unauthorized access to peripheral system exposing customer names and contact details

Salt informed its customers of a security incident in which an unauthorized actor gained entry to a peripheral system that stores limited personal information. The accessed data includes first and last names, mailing addresses, mobile numbers, dates of birth and email addresses, while passwords, banking details and service records were untouched. Investigations traced the intrusion to the misuse of an existing credential, prompting immediate lockdown of the affected access points and an upgrade of security measures.

Salt emphasized that its core infrastructure was not breached and warned users to be cautious of suspicious communications that might exploit the leaked details. The firm also reiterated that it never requests sensitive information via email, SMS or phone calls.