Years-old login credential leads to leak of 270,000 Samsung customer records

Samsung Germany has apparently suffered a large knowledge breach, with roughly 270,000 buyer data at present being supplied on the market on a darkish net discussion board. A prison hacker utilizing the pseudonym “GHNA” claims to have lately copied this knowledge from from Samsung Electronics Germany’s assist system.

In line with the darkish net put up, the leaked knowledge units comprise names, addresses, emails, order knowledge, and inside communications. Safety specialist Hudson Rock, which analyzed the breach, discovering that preliminary entry was gained by way of login credentials stolen by an infostealer in 2021.

Assault by way of IT service supplier

At the moment, the login credentials have been stolen from the pc of an worker of IT service supplier Spectos, which provides software program to observe and enhance service high quality. It’s linked to Samsung’s German ticket system at samsung-shop.spectos.com. Apparently, the compromised credentials had not been up to date for years.