Nokia has issued a statement claiming leaked source code published on a hacking forum was stolen from a third-party server and poses no threat to customers.
Nokia has issued a statement claiming leaked source code data published on an underground hacking forum was stolen from a third-party server and poses no threat to Nokia or its customers.
The Finnish telecommunications company downplayed the severity of the incident, claiming no company or customer data was implicated in the leak.
The prominent threat actor IntelBroker listed a “large collection of Nokia source code’ to the notorious BreachForums on 4 November, offering the stolen archive for sale.
It claimed it was able to steal the information from a third-party contractor that had been working closely with Nokia to help develop internal tools.
The compromised data was said to include SSH keys, source code, RSA keys, Bitbucket logins, SMTP accounts, webhooks, and hardcoded credentials.
According to external analysis of the sample data provided by IntelBroker, the leaked data also contained potentially sensitive customer information related to Vodafone Idea, India’s largest telecoms company.
