Hacker Alleges Full-Scale Data Heist from AMD: Investigation Underway
Chip manufacturer AMD is currently investigating a potential data breach, following claims by a hacker that they have comprehensively stolen various types of data from the company. As of now, there is no clear evidence to confirm the authenticity of the data.
The hacker, known by the codename IntelBroker, is also a moderator on the dark web hacker forum Breach Forums. Given their position, it is unlikely they would fabricate data to deceive other hackers, which lends some credibility to their claims.
IntelBroker revealed details on the dark web, including that the data theft occurred on June 10, 2024, when they successfully infiltrated AMD's internal infrastructure and accessed servers hosting multiple data types.
The stolen data includes:
- Various ROMs developed by AMD
- Firmware created by AMD
- Source codes
- Property files
- Employee databases
- Customer databases
- Financial information of AMD
- Future product plans
- Various technical specifications
The employee database specifically contains user IDs, job functions, email addresses, employment statuses, full names, and business phone numbers.
IntelBroker has not publicly listed a price for this database, instead inviting interested buyers to make offers. Transactions are required to be made in Monero (XMR), a cryptocurrency known for its privacy features, making transactions hard to trace. The hacker also agreed to conduct transactions through an escrow service, involving a mutually agreed upon middleman to ensure payment security.
It's worth noting that IntelBroker has a history of launching attacks, including involvement in an attack on the US wireless network operator T-Mobile, resulting in significant data leaks.
If the claims of data theft are valid, AMD could face severe repercussions, including the leak of vast amounts of private information and various trade secrets. The leaked product source codes could potentially be exploited to discover more vulnerabilities.
The outcome of AMD's investigation is eagerly awaited, with hopes that forthcoming news will debunk the hacker's claims rather than confirm a successful intrusion.