AMD investigating reports of massive data breach

Giant semiconductor manufacturer Advanced Micro Devices, Inc. (AMD) has apparently been breached by IntelBroker, a notorious hacker from the Breach Forums, and is working with law enforcement to further investigate. The hack may have uncovered future product details, customer databases, and employee details. The breach emerged on June 18, 2024 at The Cyber Express.

The hacker claims to have accessed information related to the following records:

  • ROMs
  • Firmware
  • Source code
  • Property files
  • Employee databases
  • Customer databases
  • Financial information
  • Future AMD product plans
  • Technical specification sheets

as well as the following sensitive personal information of AMD employees:

  • User IDs
  • Job functions
  • Email addresses
  • Employment status
  • First and last names
  • Business phone numbers

The hacker is selling the data exclusively for XMR (Monero) cryptocurrency, accepting a middleman for transactions.

AMD hasn’t yet confirmed the breach publicly.

Read more about it here.

Christie’s hit with class-action lawsuit over client data breach after cyberattack shuts down its web site

British auction house Christie’s has been hit with a class action lawsuit over a May 2024 data breach that compromised the personal information of approximately 500,000 current and former customers. According to the lawsuit, an email Christie’s sent to victims on May 30, 2024 reported that the compromised data included full names, genders, dates of birth, passport numbers and expiration dates, countries of birth, ID numbers and Machine Readable Zone along the bottom of a passport’s identity page.

The lawsuit further claims that Christie’s customers are now threatened by multiple forms of identity theft. These range from the obvious, such as the prospect of bad actors opening fraudulent financial accounts and taking out loans in the names of the exposed clients, to the less intuitive, including using the exposed parties’ data to illegally secure government benefits, obtain driver’s licenses pairing Christie’s clients’ names with alternate photographs and “giving false information to police during an arrest”.

Read more about it here.

TikTok accounts of celebrities breached using DM

TikTok accounts of CNN, Sony, and Paris Hilton were reportedly breached on June 4, 2024. While it doesn’t appear that the hackers have posted anything to the accounts, the method reportedly didn’t include the targets doing anything more than opening a direct message.

Semafor first reported that CNN’s TikTok account had been hacked, forcing the broadcaster to take down its account for several days.

The company did not share technical details about the vulnerability exploited by the attackers.

Read more about it here.