A hacker breaches Samsung customer support by exploiting an internal password that hadn’t been changed in four years, despite it appearing in a database of compromised credentials.
Someone at Samsung may need a refresh on password hygiene. A hacker reportedly breached one of the company’s databases using a login that was stolen in 2021 but never changed.
Over the weekend, a hacker called “GHNA” claimed to have stolen 270,000 customer satisfaction tickets from a Samsung database in Germany. The data, which was uploaded on a hackers’ forum, includes customers’ full names, email addresses, and physical addresses.
Cybersecurity vendor Hudson Rock, which monitors stolen passwords collected from malware and circulated among hackers, investigated samples of the stolen information.