"Currently, we have not noticed any impact on our business or our customers. We have taken measures to prevent similar incidents from occurring," the statement said. Samsung's report sent to Bloomberg has a paragraph. The company insists that the authentication information of customers and employees has not been stolen by hackers.
Samsung did not disclose the identity of the hacker who infiltrated the system, but before that, the Lapsus$ group had claimed responsibility. In the post about the hack, Lapsus$ said it split 190GB of data into three compressed files and shared them as torrents. The team also posted some screenshots of Samsung's product source code to demonstrate.
In addition to the loader source code, some other data also appeared such as biometric authentication and device encryption from Samsung. BleepingComputer - the first page to report the incident also claimed that the shared file contained confidential data of Qualcomm.
Before Samsung, Lapsus$ was also the hacker group involved in Nvidia's recent data hack. The attack was first mentioned on February 24. At the time, Nvidia said it was investigating a network issue that affected the company's email system and developer tools. The South American hacker group Lapsus$ later claimed responsibility, and claimed to have stolen a TB of Nvidia data, including device drivers, firmware, SDKs, documents and confidential tools. .
Security experts say that Lapsus$'s original goal was to blackmail the graphics card manufacturer. After many days of failing to achieve the goal, this group turned to the direction of asking to unlock the LHR - not limiting the cryptocurrency mining capacity of Nvidia graphics cards. Currently, Lapsus$ has not made a similar request or ransom amount to Samsung.