Samsung Electronics is notifying some of its customers in the UK of a recent data breach that has exposed their personal information.
The company says the cyber-attack only impacted customers who made purchases from the Samsung UK online store between July 1, 2019 and June 30, 2020.
Samsung discovered the breach on November 13, 2023 and determined a hacker exploited a vulnerability in a third-party application.
Samsung Shares Message with Affected Customers
Samsung has shared the following message with customers who may be impacted:
Personal Data Exposed in Breach
The company has not provided details on the security issue but notified customers that exposed information includes:
- Names
- Phone numbers
- Email addresses
Samsung emphasized financial data and passwords were unaffected.
Third Incident in Two Years
This is the third breach Samsung has faced in two years. In July 2022, hackers stole names, contacts, birthdays and registration data. In March 2022, the Lapsus$ group hacked internal servers and stole source code.
Protecting Yourself After a Breach
Affected customers should take precautions like changing passwords, reviewing statements for fraud and considering identity theft services. Samsung continues to investigate and provide updates.
FAQ
What should I do if my information was exposed?
We recommend taking proactive steps to protect your personal data, such as changing passwords on all accounts used during the breach period, reviewing statements closely for suspicious activity, and considering identity theft monitoring services. Staying vigilant is important.
How can I know if I was impacted?
Samsung is directly contacting customers who made purchases from the UK online store between July 1, 2019 and June 30, 2020 with details on the incident and next steps. If you did not receive a notice, your information was likely not involved in this breach.
What caused the data breach?
An unauthorized third party gained access after exploiting a vulnerability in a third-party application used by Samsung. The company is still investigating to identify the root cause.
Was any financial data stolen?
No, Samsung has confirmed that payment details and passwords were not among the personal information accessed in this incident. Only names, phone numbers and emails may have been compromised.
Do other Samsung customers need to worry?
The breach only impacted individuals who made purchases on the Samsung UK website during the specified 12-month window. There is no indication that customers from other regions were involved.
How can I get more information?
Samsung will continue providing updates through official communications. Users concerned about this incident can also contact Samsung support for additional details regarding their account.