A single attacker, posing as internal IT support, called a contact center agent, walked them through a few "routine" steps, and connected a tool that gave access to every customer record in the system. No malware. No breach of a firewall.
Just a phone call and a trusted agent. Delvetek finds and closes the
configuration gaps that put client contracts, PCI compliance, and agent access at risk — benchmarked against CCCS, CIS, and NIST standards.


A single attacker, posing as internal IT support, called a contact center agent, walked them through a few "routine" steps, and connected a tool that gave access to every customer record in the system. No malware. No breach of a firewall.
Just a phone call and a trusted agent. Delvetek finds and closes the
configuration gaps that put client contracts, PCI compliance, and agent access at risk — benchmarked against CCCS, CIS, and NIST standards.
5.7M
Records Exposed — Qantas Vishing Breach
33%+
Typical Annual Agent Turnover
CCCS·CIS·NIST
Benchmarked Protocol
10+
Years in Business
THE PROBLEM
A well-known 2025 breach exposed millions of customer records after an attacker impersonating IT support called a contact center agent and talked them through connecting an attacker-controlled tool to the CRM.
Vishing exploits exactly what agents are trained to do
Voice-based social engineering — vishing — has become one of the most common ways attackers get into an organization, and a contact center floor full of agents trained to be helpful on the phone is exactly the environment it's built to exploit.
Source: OAIC investigation into the 2025 Qantas data breach, via Bitdefender and IDM (2026); Mandiant via NC.gov (2026) — verify current figures before publishing.
Turnover is your biggest structural risk
Contact center agent turnover regularly runs well above a third of staff annually. Every departing agent is a potential open door if access isn't revoked the moment they leave.
Source: SQM Group, call center attrition benchmarks; The Connected Hive (2026) — verify current figures before publishing.
THE PROBLEM
A well-known 2025 breach exposed millions of customer records after an attacker impersonating IT support called a contact center agent and talked them through connecting an attacker-controlled tool to the CRM.
Vishing exploits exactly what agents are trained to do
Voice-based social engineering — vishing — has become one of the most common ways attackers get into an organization, and a contact center floor full of agents trained to be helpful on the phone is exactly the environment it's built to exploit.
Source: OAIC investigation into the 2025 Qantas data breach, via Bitdefender and IDM (2026); Mandiant via NC.gov (2026) — verify current figures before publishing.
Turnover is your biggest structural risk
Contact center agent turnover regularly runs well above a third of staff annually. Every departing agent is a potential open door if access isn't revoked the moment they leave.
Source: SQM Group, call center attrition benchmarks; The Connected Hive (2026) — verify current figures before publishing.
THE STAKES
Enterprise clients that outsource to a call center or BPO increasingly require proof of security controls before signing — and during the contract. A center that can't produce documented evidence on request risks losing the account, regardless of how good day-to-day service has been.
THE STAKES
Enterprise clients that outsource to a call center or BPO increasingly require proof of security controls before signing — and during the contract. A center that can't produce documented evidence on request risks losing the account, regardless of how good day-to-day service has been.
THE MECHANISM
Underneath the vishing and turnover risk sits the same root cause we find across every vertical: the CRM, telephony, and Microsoft 365 environment your center already pays for was never fully configured.
MFA licensed but not enforced across CRM, telephony admin, and remote-access accounts.
No standard identity-verification process for internal help-desk requests.
Agent access left active for days or weeks after an employee departs.
Backups of CRM and call data that have never been test-restored.
THE MECHANISM
Underneath the vishing and turnover risk sits the same root cause we find across every vertical: the CRM, telephony, and Microsoft 365 environment your center already pays for was never fully configured.
MFA licensed but not enforced across CRM, telephony admin, and remote-access accounts.
No standard identity-verification process for internal help-desk requests.
Agent access left active for days or weeks after an employee departs.
Backups of CRM and call data that have never been test-restored.
Proactive IT management and 24/7 monitoring to keep your systems running at peak performance.
Expert advice from industry professionals, no project is too big or small for us.
Safeguard your business and get the peace of mind you need.
Custom technology solutions tailored to your business needs.
THE OFFER
We benchmark your environment against CCCS Baseline Controls, CIS Controls, and NIST — the same frameworks your cyber insurer and the enterprise clients who outsource to you are already measuring you against.
THE OFFER
We benchmark your environment against CCCS Baseline Controls, CIS Controls, and NIST — the same frameworks your cyber insurer and the enterprise clients who outsource to you are already measuring you against.
1
Infrastructure audit
Aging hardware, undocumented systems, single points of failure.
2
Vulnerability assessment
MFA enforcement, agent access sprawl, offboarding gaps.
3
Cost optimization
Break/fix vs. managed spend, licensing overlap.
4
Technology roadmap
Sequenced around your client contracts, not a sales pitch.
1
Infrastructure audit
Aging hardware, undocumented systems, single points of failure.
2
Vulnerability assessment
MFA enforcement, agent access sprawl, offboarding gaps.
3
Cost optimization
Break/fix vs. managed spend, licensing overlap.
4
Technology roadmap
Sequenced around your client contracts, not a sales pitch.
PROOF
Delvetek has served businesses across North America since 2016, with certified expertise including Azure Solutions Architect Expert and ISC2 CISSP, backed by direct partnerships with Microsoft, Veeam, and SentinelOne.

"Delvetek team is professional, responsive, and knowledgeable. They quickly address issues, provide reliable solutions, and ensure our systems run smoothly. Highly recommended for any business looking for dependable IT support and managed services."


"As an insurance company, we've partnered with Delvetek to manage our IT operations for over 15 years. Their highly skilled team has consistently met and exceeded project expectations. They've truly earned our trust as our go-to partner for all things IT."


"We have engaged Delvetek for various IT projects and consulting services at Amica. Their team consistently delivers excellent, top-tier results. The Delvetek team is knowledgeable, responsive, and committed to providing high-quality service. It's a pleasure working with a partner we can truly rely on."

PROOF
Delvetek has served businesses across North America since 2016, with certified expertise including Azure Solutions Architect Expert and ISC2 CISSP, backed by direct partnerships with Microsoft, Veeam, and SentinelOne.

"Delvetek team is professional, responsive, and knowledgeable. They quickly address issues, provide reliable solutions, and ensure our systems run smoothly. Highly recommended for any business looking for dependable IT support and managed services."


"As an insurance company, we've partnered with Delvetek to manage our IT operations for over 15 years. Their highly skilled team has consistently met and exceeded project expectations. They've truly earned our trust as our go-to partner for all things IT."


"We have engaged Delvetek for various IT projects and consulting services at Amica. Their team consistently delivers excellent, top-tier results. The Delvetek team is knowledgeable, responsive, and committed to providing high-quality service. It's a pleasure working with a partner we can truly rely on."

You built a call center or BPO to deliver great service, not to interrogate every
caller claiming to be internal support. Get a clear, documented picture of where
your configuration debt is sitting — and a fixed-fee path to closing it — before
a client audit, an insurance renewal, or a vishing call forces the conversation.
You built a call center or BPO to deliver great service, not to interrogate every
caller claiming to be internal support. Get a clear, documented picture of whereyour configuration debt is sitting — and a fixed-fee path to closing it — before a client audit, an insurance renewal, or a vishing call forces the conversation.

(905) 499-3498

Unit 29, 1100 Central Parkway West, Mississauga, L5C 4E5, Canada

Delvetek LLC
30 N Gould St # 56502, Sheridan, WY 82801, United States
© 2026 Delvetek. All rights reserved. #FutureProof