SAMSUNG has admitted that a large number of customers may have had their personal data stolen in an cyber attack four years ago.
Customers who made purchases with Samsung UK’s online store between 1 July 2019 and 30 June 2020 are the ones who have been affected.
GettyUS customers, employees, and retailers have not been affected[/caption]
While reams of information has been leaked (full list below), the Korean technology company says sensitive data, such as payment details or passwords, remains safe.
The hacker is thought to have exploited a cyber vulnerability in a third-party app used by Samsung, according to a report from Bleeping Computer.
Samsung says it has “taken the necessary steps to resolve this issue” including issuing a fix for the vulnerability.
In an email to customers, Samsung wrote: “On 13 November 2023, it was determined that an unauthorised individual exploited a vulnerability in a third-party business application we use.
“And that some personal information of certain customers who made purchases on SEUK’s eCommerce site between July 1, 2019, and June 30, 2020, was affected.”
Here’s the full list of all the information that Samsung believes has been exposed in the cyber attack:
Customer names
Phone numbers
Addresses
Email addresses
A company spokesperson confirmed to TechRadar Pro that the incident is limited to the UK.
US customers, employees, and retailers have not been affected.
While the information that has been leaked may appear non-consequential, it can put people at greater risk of falling victim to a scam or phishing attempt.
Fraudsters often use phishing emails or text messages to lure people into revealing sensitive information about themselves.
In some cases, hackers may use your leaked email address to try and access other accounts under the same address.
Make sure you know the four subtle clues that reveal you’re about to be the target of a scam.