AMD investigates possible cyberattack following data breach claims

AMD, a leading semiconductor company, is investigating claims of a data breach after a threat actor put up allegedly stolen data for sale on a hacking forum. The hacker, IntelBroker, asserted that the data includes sensitive information such as AMD employee details, financial documents, and confidential company information.

In a statement, AMD acknowledged the situation: "We are aware of a cybercriminal organization claiming to own stolen AMD data. We are working closely with law enforcement officials and a third-party hosting partner to investigate the claim and the significance of the data."

IntelBroker shared screenshots of purportedly stolen AMD credentials but has not disclosed the price or the method used to obtain the data. The threat actor claims the compromised information includes details about future AMD products, spec sheets, employee databases, customer databases, property files, ROMs, source code, firmware, and financial records.

The employee database reportedly contains user IDs, names, job functions, business phone numbers, email addresses, and employment statuses, according to DarkWebInformer.

IntelBroker is infamous for previous breaches, including the DC Health Link hack, which led to a congressional hearing after exposing the personal data of US House of Representatives members and staff. The hacker was also responsible for breaching the Europol Platform for Experts (EPE), a web portal international law enforcement agencies used to share information.

AMD is collaborating with law enforcement and cybersecurity experts to assess the validity of the threat actor’s claims and mitigate any potential impact. This investigation comes amid increasing scrutiny of data security practices within the tech industry. This isn’t the first time AMD has faced such an incident. In June 2022, the company investigated a breach claimed by the RansomHouse extortion gang, who asserted they had stolen 450GB of data.