Blog Layout

The Cybersecurity Lair™ • June 19, 2024

Latest News | AMD Faces Major Data Breach: Future Product Plans and Employee Info at Risk

AMD Investigates Severe Data Breach Amid Growing Cybersecurity Concerns

AMD is investigating a significant data breach purportedly orchestrated by the cybercriminal Intelbroker, involving sensitive future product details, customer databases, and employee information.


AMD announced an investigation into claims of a substantial data breach by the cybercriminal organisation Intelbroker, as initially reported by Bloomberg. The breach, revealed on June 18 by The Cyber Express, reportedly involves stolen data ranging from future product specifications, ROMs, firmware, internal communications, and source code, to financial records and comprehensive employee information. This breach poses a significant risk to AMD's competitive advantage and raises concerns about intellectual property theft and corporate espionage. The leaked data, showcased on BreachForums, indicates the potential severity of the breach. This incident follows AMD’s previous cybersecurity challenges, including a 2022 breach by RansomHouse. Intelbroker has a history of high-profile cyber intrusions targeting various organisations, further emphasising the need for robust cybersecurity measures.

Key Points



  1. Breach Investigation: AMD is working with law enforcement and a third-party hosting partner to investigate the breach.
  2. Extent of Data Stolen: Includes future product details, customer databases, employee information, ROMs, firmware, financial records, and internal communications.
  3. Significance: Potential threat to AMD's competitive edge and intellectual property.
  4. Past Incidents: AMD faced a similar incident in 2022 with the RansomHouse hacking group.
  5. Intelbroker's History: Known for targeting high-profile organisations, including Los Angeles International Airport and U.S. federal agencies.
  6. Leak Evidence: BreachForums showcases samples indicating the breach's gravity.


Takeaways


  1. Urgency of Cybersecurity: Emphasises the importance of robust cybersecurity protocols for protecting sensitive information.
  2. Collaborative Investigation: Highlights the need for cooperation between companies, law enforcement, and cybersecurity experts.
  3. Risk to Competitive Edge: Breaches can jeopardise a company's market position by exposing critical intellectual property.
  4. Recurrent Threats: Indicates that major tech companies are frequent targets of sophisticated cybercriminal organisations.
  5. Data Sensitivity: The variety of stolen data underscores the broad scope of potential damage from such breaches.


Source and further reading.


Shilov, A. (2024, June 19). AMD working with law enforcement after reports of massive data breach — hack may have uncovered future product details. Tom’s Hardware.
https://www.tomshardware.com/tech-industry/cyber-security/amd-working-with-law-enforcement-after-reports-of-massive-data-breach-hack-may-have-uncovered-future-product-details


Kovacs, E. (2024, June 19).
AMD Investigating Breach Claims After Hacker Offers to Sell Data. https://www.securityweek.com/. Retrieved June 19, 2024, from https://www.securityweek.com/amd-investigating-breach-claims-after-hacker-offers-to-sell-data/


Share by: