A data leak revealed the names, phone numbers, postal addresses, and email addresses of Samsung customers, among other personal information. According to the firm, only consumers who purchased from the Samsung UK online store between July 1, 2019, and June 30, 2020 were affected by the breach caused by a cyberattack.
According to a report from Bleeping Computer, Samsung discovered the data breach on November 13 and established that it was the consequence of a hacker taking advantage of a weakness in a third-party program.
The South Korean smartphone manufacturer has not yet disclosed information on the security flaw that hackers exploited or the weak application that gave hackers access to Samsung customers’ private data.
However, according to the corporation, the incident had no bearing on credentials or financial information. The company also said that it notified the UK’s Information Commissioner’s office of the occurrence and has taken all required measures to remedy the security issue.
The company has been affected by three similar incidents in the last two years, including the data breach. Hackers accessed Samsung customers’ names, contact details, demographic data, dates of birth, and product registration information earlier in July 2023.
The source code for Galaxy smartphone handsets was among the sensitive data taken by threat actors that broke into Samsung’s network in March 2023.
Seven of the 18 zero-day vulnerabilities in Samsung’s Exynos chipsets detailed in a report published by Google’s bug bounty team that same month might be used by threat actors to execute remote code from the internet to a baseband.
