Nokia's investigation into recent data breach allegations has found that the source code leaked to a hacker forum belongs to a third party and the company's and customer data has not been affected .
See also: Nokia: Changing the Future of Telephony with Immersive Calls
The statement comes in response to threats from IntelBroker earlier this week that published data belonging to Nokia, which was allegedly stolen after a third-party vendor's server was breached.
The hacking group attempted to sell the data, claiming it included SSH keys, source code, RSA keys, BitBucket connections, SMTP accounts, webhooks, and credentials hardcoded, but decided to leak it after Nokia denied the breach.
IntelBroker previously told BleepingComputer that it breached a third-party vendor via a poorly protected SonarQube, which allowed the download of files from several major companies, including Nokia.
See also: Nokia faces data breach allegations
"We have found no evidence that this incident would compromise any critical Nokia systems or data, including source code, custom software, or encryption keys. customers are not affected in any way, including their data and networks," the company told BleepingComputer.
The leaked source code is for an application that was not developed by the company, but by a third party. The application was created to work only on a network owned by a Nokia customer, could not work outside of it, and does not contain any Nokia code.
Despite finding no risk to systems or data, the Finnish multinational company says it continuesto "closely monitor the situation."
See also: Nokia investigates breach claims – Hacker says he stole source code
A data breach occurs when unauthorized individuals gain access to confidential information, often resulting in the exposure of sensitive personal and financial data. These breaches can occur through a variety of means, including hijacking, phishing , or insider threats. The consequences of a data breach are significant, including financial losses, damage to an organization’s reputation, and legal ramifications. To mitigate these risks, companies should implement strong cybersecurity measures, regularly update their systems , and educate employees on data protection practices. Prevention and rapid response are crucial to minimizing the impact of a data breach.
Source: bleepingcomputer
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
