Networker: As Hoss says this isn't exactly new. I read about the potential some time ago, (though my old brain can't remember where), and when we had our new phone system put in I grilled them long and hard on the security implications. In our case there is no real link between the call accounting system and the PBX. The PBX can only be accessed from a dial-up connection that only allows the call to go to a single pre-determined location from a single remote phone number. The PBX itself reports to the call accounting system that can be accessed from the internal network but the incoming maintenance dial-up is physically separated from the call accounting portion of the hardware - at least - that's what they assured me. Needless to say I have no way of ascertaining that but if I get hacked that way I'm prepared to lawsuit their asses out of the state!!!!