A recent data breach at Samsung has compromised the personal details of numerous customers in the United Kingdom (UK). Detected on November 13, the Korean phone manufacturer disclosed the breach this week. Samsung reported that the incident exposed the personal information of customers who made online purchases from the Samsung UK store between July 1, 2019, and June 30, 2020.
@troyhunt another dataset to keep your eyes open for 🙄 pic.twitter.com/VwNCd1nUF1
— Kwyjibo (@KwyjiboUK) November 15, 2023
Samsung issued a letter to its users, which was subsequently shared on X. The communication states that attackers exploited a vulnerability in a third-party application used by Samsung for its business operations.
Also Read: Generative AI Coming to iPhone 16 in 2024, Following Samsung’s Lead
The company affirms that the breach did not expose passwords or customer financial data. However, it did compromise the personal information of many users, including names, phone numbers, email addresses, and home addresses.
In response to the security issue, Samsung has reported the incident to the UK’s Information Commissioner’s Office. This incident marks the third data breach for Samsung within a two-year period.
In a breach in late July 2022, hackers successfully infiltrated Samsung’s system, accessing customers’ names, contacts, demographic details, dates of birth, and product registration data. Samsung reassured at that time that the attackers were unable to access any financial information, such as credit card numbers or Samsung Pay details.
In March 2022, the data extortion group Lapsus$ successfully infiltrated Samsung’s network, obtaining unauthorized access to sensitive information, notably the source code for Galaxy smartphones. This hacking collective also focused on other major tech companies, such as Nvidia and Microsoft, issuing threats to disclose the source code of their critical products. Certain organizations even witnessed their data being publicly exposed through Telegram channels.
