Samsung is warning customers about a cybersecurity incident that occurred in July, where “an unauthorized third party obtained information from certain Samsung systems in the U.S.,” including details such as names, birthdays, contact information, and product registration information. Samsung says it discovered the data breach on Aug. 4 and is currently investigating it with “a leading external cybersecurity firm.”.
See also: MooBot botnet targets unpatched D-Link routers
According to Samsung's FAQ about the data breach, the company is emailing affected customers and will continue to do so as its investigation progresses. Samsung says that not everyone's information was leaked the same way.
See also: The US "took down" the criminal marketplace WT1SHOP
While the company says no Social Security numbers or debit/credit card numbers were stolen, the type of information the hackers ended up getting could be very useful in social engineering attacks on other services you use. If you've been putting off enabling two-factor on some important accounts, it's probably not a bad idea to do so as soon as possible.
See also: InterContinental Hotels Group victim of cyberattack
Samsung says that at this time you don't need to change your password or take any specific steps to keep your Samsung products or accounts secure, as "consumer devices were not affected by this incident." However, the company recommends that you monitor any unusual activity on your account and be extra cautious when it comes to phishing emails.
On social media, some customers wondered why the company waited a month to report the breach.
This is the second time in 2022 that Samsung has been hacked. In March, the company said that the Lapsus$ group hacked its systems and stole very important data, including the source code of its Galaxy.
Source of information: theverge.com
