Samsung Germany affected by major data breach

270.000 customers fell victim.

In March 2025, it was revealed that 270,000 customer service records from Samsung Germany had been exposed on the internet. This occurred because hackers were able to use old login credentials belonging to an employee to gain access to the system.

How did this happen?
In 2021, the login credentials of an employee of Spectos GmbH were stolen. This company managed the customer service system of Samsung Germany. The credentials were stolen through malware, a malicious computer program. Because the passwords had not been changed since then, hackers were able to use these old credentials in 2025 to break into the customer service system.
As a result, the hackers gained access to tens of thousands of customer service tickets containing a large amount of personal information.

What data was leaked?
The leaked information included full names, email addresses, postal addresses, order and product information, payment details, and communication between customers and Samsung regarding their orders and issues.

What are the risks of this data breach?
The leaked data is a goldmine for criminals. It can be used, for example, to:

• Send fake emails (phishing) that appear highly credible because they contain extensive personal information.
• Commit identity fraud by impersonating customers.
• Submit false warranty claims or commit other forms of order-related fraud.
• Intercept deliveries by exploiting address details.

What is Samsung doing?
So far, Samsung Germany has not officially responded to the data breach. It is also unclear whether a fine has been imposed by European data protection authorities. This raises questions about the responsibility of companies to ensure proper security measures are also in place at their external partners.

What can we learn from this?

• It is important to change passwords and login credentials regularly.
• Companies must closely monitor the security practices of their partners and suppliers.
• Customers should be informed when their data has been compromised.
• Prevention is better than cure: stronger security helps prevent data breaches.

How NormNest can help
Would you like more information or expert advice? Feel free to schedule a no-obligation appointment with one of our specialists.