CASE FILE RT-0247 Call-center

We stopped a 300,000-customer data breach overnight

A pentest that began as a routine assessment turned into an urgent operation to save the customer base — from the first finding to closing the production holes in a single night.

Objective: Run a scheduled security assessment of the call-center's web infrastructure serving 300,000 customers
Path: The assessment uncovered a critical SQL injection in the client's web application. Through it we reached the database and dumped administrator password hashes. The chain continued: one hash was cracked, we logged into the server — and found that an attacker could already have entrenched themselves there: a task running daily as root kept a backdoor open. Pushing the attack further, we took control of the server and several CRM systems — then stopped and handed everything to the client's team: the vulnerability, the attack path, the affected systems.
Detected: The injection was never detected at the edge, and the daily root task looked like routine automation and raised no alerts

After: Together with the client's team we closed the injection, hardened the server and removed the backdoor. The breach of 300,000+ customer records was prevented before it could be used: the company avoided regulatory fines, a reputational crisis and the loss of subscriber trust.

Names, sectors and infrastructure details are changed; timelines and tradecraft are not. More case files →

The pattern in one page

Password hashes are passwords. Admin hashes dumped, one cracked within hours — that is a login, not a statistic.
Backdoors masquerade as automation. A daily task running as root is not a backup until you have checked every task in the schedule.
A pentest finds more than your holes. An assessment exposes the paths an attacker has already laid — before they use them.

Recognize the pattern?

We can verify	Typical effort
The same path against your estate, under signed ROE	2–4 wks
Detection validation: what your SOC would have seen	included
Retest after fixes, within three months	free

Start a conversation — reply within two business days

Could this path exist in your estate?

Tell us your crown jewels — we will tell you how close this case file is to your reality.

Request assessment