When Intel experiences a security breach, it typically reveals numerous vulnerabilities within their extensive Core lineup of processors. In contrast, when AMD suffers a security breach, it signifies that highly confidential and proprietary information has been accessed.
A hacking group named “IntelBroker” claims to have obtained sensitive data from AMD’s servers. The group’s name is particularly ironic given AMD’s main competitor is Intel Corporation.
Notably, IntelBroker previously breached Europol, and Facebook Marketplace in October 2023 and has also claimed responsibility for attacks on the U.S. Department of Defense, General Electric, and the Weee! grocery delivery service.
The hacking group has released a sample of the compromised data, which appears to include AMD product information. However, the sample does not contain details about any unreleased products.
It does, however, include information on the EPYC 4004 series, which was launched in late May and is pretty much a cheaper more affordable “EPYC” alternative on the mainstream AM5 socket.
The extent of the breach remains unclear, and it is uncertain if additional samples exist.
According to Bloomberg, AMD has confirmed that a data breach may have occurred and that they are investigating the matter. IntelBroker claims to have obtained ROMs, firmware, source code, property files, and limited database entries for both company employees and customers. They also claim to have financial information, technical specification sheets, and future product plans, which are highly intriguing to technology enthusiasts.
These types of attacks are particularly harmful to employees. IntelBroker allegedly has access to User IDs, employment statuses, business phone numbers, email addresses, and the full names of AMD employees.
As is typical for such groups, they are selling the data exclusively for Monero (XMR) cryptocurrency, which is renowned for its safety and security. Given Monero’s rejection by anti-encryption states like Australia, IntelBroker is using a middleman for transactions to ensure anonymity and security, or possibly to scam potential buyers.
