The company said customer’s personal data was accessed by a vulnerability on its e-commerce site

Scarlett Evans, Assistant Editor, IoT World Today

November 17, 2023

1 Min Read
The incident is the third data breach disclosed by Samsung in the past two years
Getty

Samsung has disclosed it recently discovered a “cybersecurity incident” that impacted customer’s personal data during a nearly year-long breach of its systems. 

In a letter to customers, which was shared on X (formerly Twitter), Samsung said U.K.-based customers who accessed its e-commerce site between July 1, 2019 and June 30, 2020, had their data compromised.

The company said attackers exploited a vulnerability in an unnamed third-party business application to access customer’s personal information, including their names, phone numbers, addresses and email addresses.

Samsung said the breach was not discovered until this November, three years after the incident seemingly ended.  

View post on X

The incident marks the third data breach disclosed by Samsung in the past two years.

In March 2022 the company said it had been attacked by hacking group Lapsus$, which claimed to have leaked 190 gigabytes of data from the company’s systems, including source codes for its Galaxy-branded devices.

In July of the same year, the company was victim to a cybersecurity incident that impacted its U.S. customers.

In a statement, Samsung said an “unauthorized third party” acquired information from some of Samsung’s U.S. systems.

The company said the issue “did not impact Social Security numbers or credit and debit card numbers,” but in some cases, may have compromised personal data such as name, contact and demographic information, date of birth and product registration information.

Related:Boeing Cyberattack Highlights Need for Security Solutions

“We have taken actions to secure the affected systems,” the company said. “And [we] have engaged a leading outside cybersecurity firm and are coordinating with law enforcement.”

About the Author(s)

Scarlett Evans

Assistant Editor, IoT World Today

Scarlett Evans is the assistant editor for IoT World Today, with a particular focus on robotics and smart city technologies. Scarlett has previous experience in minerals and resources with Mine Australia, Mine Technology and Power Technology. She joined Informa in April 2022.

Sign Up for the Newsletter
The most up-to-date news and insights into the latest emerging technologies ... delivered right to your inbox!

You May Also Like