Samsung Electronics was hit by a new data breach that impacted only customers who made purchases from the Samsung UK online store between July 1, 2019, and June 30, 2020.
The company started notifying its customers of the data breach that exposed their personal information to an unauthorized individual.
The data breach was discovered by Samsung on November 13, and determined that it was the result of a hacker exploiting a vulnerability in a third-party application the company used.
No details have been provided about the security issue leveraged in the attack or the vulnerable application that enabled the attacker to access Samsung customer’s personal information.
According to the breach notification, the exposed data may include names, phone numbers, postal and email addresses. The company assures that credentials or financial information remains unaffected by the incident.
According to a Samsung spokesperson, cybersecurity incident is limited to the UK region and does not affect data belonging to customers in the U.S., employees, or retailers.
The company has taken all necessary steps to address the security issue and the incident has also been reported to the UK’s Information Commissioner’s Office.
This is the third data breach Samsung has suffered in two years. The previous one occurred in late July, 2023 – discovered on August 4, when hackers accessed and stole Samsung customers’ names, contacts and demographic information, dates of birth, and product registration data.
In March 2023, the data extortion group Lapsus$ breached Samsung’s network and stole confidential information, including source code for Galaxy smartphones.
Comments