Samsung confirmed the data leak case after hackers leaked 190GB of confidential company data. They ensure that user and employee data is not affected by this leak.
South American hacker syndicate Lapsus$ claimed responsibility for this hack. They spread confidential Samsung data in the form of torrents, including the source code that Samsung uses for encryption and biometric authentication functions on Galaxy devices.
The data stolen by this syndicate also allegedly includes confidential data from Qualcomm, a chip company from the United States that provides chipsets for Samsung phones in several countries.
In its official statement, Samsung confirmed the case of data leaks related to the company's internal data. Samsung did not reveal the identity of the hacker behind the cyberattack, but they said no personal data of consumers or employees was taken by the hackers.
"According to our initial analysis, this leak involves some source code related to the operation of Galaxy devices, but does not include the personal information of our customers or employees," Samsung said in an official statement, as quoted by The Verge, Tuesday (8/3/2022).
"At this time, we do not anticipate any impact on our business or customers. We have implemented measures to prevent similar incidents and will continue to serve our customers without interruption."
It is not known whether Lapsus$ had any special or ransom requests from Samsung before leaking the data.
The Lapsus$ hacker syndicate is also known as the group that hacked Nvidia last week. They stole 1TB of confidential company data, including thousands of employee credentials.
In the case of the Nvidia hack, the Lapsus$ group also tried to blackmail the GPU manufacturer. They asked Nvidia to remove the Lite Hash Rate (LHR) feature that limits the ability to mine crypto on some GPUs, and requested that the source code for its graphics cards be made open source.