Samsung has disclosed a new data breach that exposed the personal information of some of its customers in the United Kingdom (UK).

Samsung Data Breach UK

The company says that the breach impacted only customers who made purchases from the Samsung UK online store between July 1, 2019, and June 30, 2020. 

Hackers exploit bug in third-party application used by Samsung

In a letter, which was shared on X (formerly Twitter) by a platform user, Samsung said the breach was discovered on November 13 and was the result of a hacker exploiting a vulnerability in a third-party application used by Samsung.

The exposed data may include names, phone numbers, postal and email addresses. However, Samsung clarified that “the issue did not impact your password or financial information.”

Samsung has taken steps to address the security issue and has reported the incident to the UK’s Information Commissioner’s Office. This is the third data breach Samsung has suffered in two years. 

In late July 2022, hackers accessed and stole Samsung customers’ names, contacts, demographic information, dates of birth, and product registration data. 

In March 2022, the data extortion group Lapsus$ breached Samsung’s network and stole confidential information, including the source code for Galaxy smartphones.

Related:

(Via)