Multiple foreign media outlets reported that the internal data of AMD, the world's second-largest personal computer processor manufacturer, has been stolen and sold by hackers on the dark web.

Event Overview

On June 19, 2024, a hacker claiming to be IntelBroker sold stolen internal data from AMD on the dark web forum BreachForums, using cryptocurrencies as the exchange condition.

The ransom note reads:

“

Hello BreachForums Community:
      Today, I am promoting leaked data from AMD.com. Thank you for reading and enjoying!
      In June 2024, the large computing company AMD suffered a data breach. The data includes: AMD's customer database, upcoming product specifications and plans, internal financial data, source code, firmware and ROM, employee information (such as names, user IDs, and phone numbers), and other sensitive information.

He also shared some screenshots of AMD certificates on the forum, but did not reveal the specific price and contact information.

AMD's Response

AMD said in a statement, "We are working with law enforcement officials and third-party escrow partners to investigate."

AMD's IT team is currently examining system logs to determine the specific means and scope of the intrusion. Meanwhile, global police are also pursuing cybercriminals.

AMD attempted to downplay the theft incident in its response to the media, saying it believes "1. The amount of data is limited; 2. Product information may have been obtained through third-party supplier websites; 3. These data may be duds."

The official investigation conclusion will take time to be given. However, the incident caused AMD's stock price to fall 2.4% in New York trading, even though the semiconductor industry's stock prices rose overall on that day.

About BreachForums

BreachForums, one of the notorious hacker underground markets, has gained its shape and fame by leaking and selling stolen company data to cybercriminals.

Due to numerous significant cases, the website has been shut down multiple times in joint law enforcement operations in various countries.

On May 22, 2024, BreachForums was shut down by the FBI due to leaking data stolen from the Europol law enforcement portal, and the relevant administrator was arrested. The FBI also covered the heads of the website administrators Baphomet and ShinyHunters with prison bars to show that the website has been controlled by the FBI.

However, there are still many other data sellers actively operating on the website. Soon after, BreachForums released a new domain name for the website.

According to BleepingComputer data, BreachForums has hacked into several well-known targets such as Europol, Home Depot, and partners of the Pentagon. It has also leaked and sold data from well-known companies such as AT&T, 23andMe, Hewlett Packard Enterprise, Home Depot, Dell, PandaBuy, and The Post Millenial.