Samsung hit by major data breach — Galaxy device source code stolen

Samsung Electronics confirmed it has been a victim of a cyberattack, with hacking group Lapsus$ leaking almost 190GB of confidential data that allegedly includes “source code relating to the performance of Galaxy devices.”

Speaking to Bloomberg, Samsung states the data breach will non impact its business or its customers, according to the initial analysis. The stolen data does not include the “personal data of our consumers or employees,” the tech giant confirms.

As spotted past Bleeping Computer, Lapsus$ claims to accept leaked confidential information in the 190GB data dump, such equally source code for Knox, Samsung’s security and management framework in its Galaxy devices, forth with details about its Trusted Applet in the company’due south TrustZone environment. This manages tasks including access command, binary encryption and hardware cryptography.

The malicious hacker group too states it has confidential source code from Qualcomm, along with details on Samsung’s online services, including Samsung Account source code such as “Authentication, Identity, API, Services” and more than.

The report also includes a message from the group almost the leak:

The Samsung representative did not state whether the grouping required demands for the leak. Withal, Samsung states, “nosotros take implemented measures to prevent farther such incidents and will continue to serve our customers without disruption.”

The Samsung data dump comes after some other cybersecurity breach at Nvidia by the same group, releasing 20GB of information from the technology company that’s reportedly a small-scale office of a much larger 1TB of data stolen. Lapsus$ claimed to accept had week-long access to Nvidia’south network, according to Bleeping Computers.

Massive data leaks have been a common occurrence over the past few years, with Microsoft suffering from a cyberattack final year, too. It’southward important to keep yourself safety online, and a few of the all-time ways to do so is to sign upward to 1 of the best password managers, along with setting up i of the best VPN services.