Samsung UK discloses year-long breach, leaked customer data

Samsung UK discloses year-long breach, leaked customer data

November 17, 2023 at 01:01AM

Samsung Electronics UK has reportedly suffered a data breach affecting customers who made purchases between July 2019 and June 2020. The breach, which was discovered on November 13, exposed information including names, phone numbers, addresses, and email addresses. This incident marks the third data breach for Samsung in the past two years. The company had previously experienced breaches in March 2022 and July 2022, resulting in a class action lawsuit. Samsung has not yet responded to requests for comment.

Key Takeaways from Meeting Notes:

1. Samsung Electronics UK has experienced a year-long data breach that exposed customer data. This is the third data breach incident that Samsung has faced globally in the past two years. The breach was discovered on November 13, 2022.
2. The breach was a result of an unauthorized individual exploiting a vulnerability in a third-party business application used by Samsung Electronics UK.
3. Customer data that was exposed in the breach includes names, phone numbers, physical addresses, and email addresses.
4. This breach follows a previous incident in March 2022 where Samsung experienced a nearly 200GB breach by an extortion gang called Lapsus. Internal information, including Galaxy smartphone source code, was compromised.
5. In July 2022, Samsung’s US outpost reported another breach targeting customer data. Information potentially stolen in this breach included names, contact and demographic information, birth dates, and product registration details, but not social security numbers.
6. After the July 2022 hack, Samsung claimed that it took action to secure affected systems and was collaborating with authorities.
7. As a result of the two cyber intrusions, Samsung is facing a class-action lawsuit filed in September 2022. The lawsuit alleges that Samsung collects personally identifiable information from customers and fails to adequately protect it.
8. The lawsuit claims that customers were coerced into providing their data or risk having certain functions and features disabled on their TVs and printers.
9. The Register has reached out to Samsung for comment but has not received a response as of the time of writing.

Full Article