[German]Samsung has made public a serious data protection incident hours before a long Labor Day weekend in the US. In July 2022, hackers managed to penetrate Samsung's IT systems. In the process, customer data was siphoned off. The whole thing was discovered as early as August 4, 2022, and became known on September 2, 2022. Here is some information on what is known so far.
Advertising
I became aware of Samsung's announcement about the data breach, which took place at the end of July 2022, was noticed at the beginning of August 2022, but was only made public at the beginning of September 2022, via various media posts as well as the following tweet.
Samsung shares in the release that they "recently" discovered a data privacy incident involving customer data. In some cases, the following data may have been siphoned from Samsung USA customers:
- Name,
- Contact and demographic information,
- date of birth
- and product registration information
Exactly what data has been leaked may vary from customer to customer. The company stresses that the hacker or hackers did not capture social security numbers or credit and debit card numbers.
In this FAQ, Samsung admits that the hack must have occurred in late July 2022. It says that in late July 2022, an unauthorized third party gained possession of information from some of Samsung's systems in the United States. On or about August 4, 2022, Samsung people discovered that personal information of certain customers had been affected as part of an ongoing investigation.
Samsung was abundantly late in making the incident public. The company took steps to secure the affected systems after the incident was discovered. Further, an external cybersecurity firm was hired to investigate and Samsung assured to cooperate with law enforcement agencies. In addition, Samsung states that it will notify affected customers about the incident.
Advertising
Advertising
