Samsung Germany Data Breach Exposes Over 216,000 Customers’ Information
Published on April 14, 2025
- A significant cybersecurity incident affected the electronics giant Samsung last month.
- The sensitive details of over 216,000 customers of the company’s German branch were leaked online.
- Hackers gained access to third-party credentials via an employee computer infected with the Raccoon infostealer.
A Samsung Germany data breach involving its logistics provider Spectos resulted in the exposure of sensitive customer data. The breach, dated March 30, 2025, compromised information on over 216,000 individuals.
The breach was added to the database of the breach notification service Have I Been Pwned (HIBP) on April 13, which said 216,333 accounts had been impacted, exposing sensitive details:
- Email addresses
- Names and salutations
- Physical addresses
- Details of items purchased from Samsung Germany
- Shipment tracking numbers
- Customer support ticket information
The intrusion occurred via Raccoon infostealer malware installed on a Spectos employee’s machine, which allegedly harvested login credentials and allowed attackers to access sensitive data repositories.
While the breach occurred via Spectos' internal systems, the repercussions extend to Samsung Germany's customers, whose data security and privacy have been affected.
The incident’s link to Spectos highlights the cybersecurity challenges associated with third-party vendors and supply chain vulnerabilities.
In March, a hacker using the alias “GHNA” leaked 270,000 Samsung Germany customer tickets for free. The data, which appeared to be sourced from “samsung-shop.spectos.com,” didn’t come from some sophisticated zero-day exploit or insider betrayal.
The attackers are believed to have exploited malware to gain access to credentials, tracing back to credentials stolen by infostealers way back in 2021, which cybercrime intelligence firm Hudson Rock has had in its database for years.
Those 270,000 tickets reportedly contained personally identifiable information (PII) like full names and email and home addresses, as well as transaction details, tracking URLs, support interactions, and more.
Customers have been advised to remain vigilant about potential phishing attempts, given that email addresses and personal information were affected.
Related
Most Popular
Most Popular