Nokia investigates potential third-party data breach after hacker claims sale of source code

Nokia is investigating a possible data breach involving a third-party vendor after a hacker, IntelBroker, claimed to possess and sell Nokia’s stolen source code. The Finnish telecommunications giant has acknowledged the allegations and expressed concern, though it maintains that internal investigations have found no evidence of a direct compromise within Nokia’s systems.

In a statement provided to BleepingComputer, Nokia said, "Nokia is aware of reports that an unauthorized actor has alleged to have gained access to certain third-party contractor data and possibly data of Nokia. Nokia takes this allegation seriously, and we are investigating it. Our investigation has found no evidence that any of our systems or data are being impacted. We continue to monitor the situation closely."

The alleged data theft was publicized by IntelBroker, a hacker who claims the data breach originated from a third-party vendor working on Nokia’s internal development projects. According to IntelBroker, the compromised data includes sensitive information such as SSH and RSA keys, BitBucket logins, SMTP accounts, webhooks, and hardcoded credentials. The hacker alleges they accessed the vendor’s SonarQube server using default login credentials, which allowed them to download various Python projects, including those connected to Nokia.

BleepingComputer attempted to verify the claim by sharing a file tree of the stolen data with Nokia. However, the company has not confirmed whether the data belongs to them.

IntelBroker has been involved in previous high-profile breaches, including those of DC Health Link, Hewlett Packard Enterprise, and grocery service Weee!. More recently, IntelBroker leaked data allegedly stolen from a third-party SaaS vendor, affecting major companies such as T-Mobile, AMD, and Apple.

Nokia has not indicated any plans to communicate directly with IntelBroker but is focused on investigating the claims and monitoring further developments in the ongoing situation.