Supply chain
β Supply Chain
Samsung Electronics Third-Party Breach (November 2023)
Primary Source βIncident Details
New Samsung data breach impacts UK store customers. Samsung Electronics is notifying some of its customers of a data breach that exposed their personal information to an unauthorized individual. The company says that the cyberattack impacted only customers who made purchases from the Samsung UK online store between July 1, 2019, and June 30, 2020. Samsung discovered the data breach two days ago, on November 13, and determined that it was the result of a hacker exploiting a vulnerability in a third-party application the company used.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Unknown
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2023-11-01 Breach occurred
- 2023-11-15 Publicly disclosed