"More specifically, the threat actor downloaded message logs for SMS messages that were sent to certain users under your Duo account between March 1, 2024 and March 31, 2024," according to Cisco ...

Cisco Duo has confirmed some sensitive customer ... With those login credentials, the attackers downloaded SMS and VoIP MFA message logs associated with specific Duo accounts.