Data leak: Attackers copy personal data from Cooler Master customers

There has been an IT security incident at hardware manufacturer Cooler Master, which is said to have affected 500,000 customers.

Save to Pocket listen Print view
Ausschnitt einer hellgrauen Computertastatur bei der die rechte Feststelltaste durch eine grüne Taste mit Aufschrift "Leak" ausgetauscht ist

(Image: CarpathianPrince/Shutterstock.com)

2 min. read
This article was originally published in German and has been automatically translated.

Attackers were able to gain access to the Fanzone customer portal and copy customer data. The attackers now want to sell the captured data. In addition to personal information such as e-mail addresses, the attackers also claim to have copied credit card data.

Initially, a cybercriminal with the pseudonym Ghostr claimed to have successfully attacked Cooler Master and stolen data in the process. The hardware manufacturer has since confirmed the incident to Bleepingcomputer.com.

Ghostr claims to have personal data from 500,000 customers. The data comes from the Cooler Master customer portal Fanzone. There, customers can open support tickets or clarify product warranty questions, for example.

The 103 GB archive is said to contain e-mail addresses, names and telephone numbers, among other things. It is also said to contain unencrypted credit card data. IT security researchers confirm the authenticity of the personal data based on a random sample. However, no information on credit cards was found in the extract of the data leak.

Whether this is true and how the process actually took place has not yet been clarified. Cooler Master has also not yet explained how many customers are actually affected. The answer to an inquiry from the hardware manufacturer by heise Security is still pending. The manufacturer states that it is currently contacting affected customers. The systems are currently safe again.

In any case, Fanzone users should pay more attention to spam emails and calls these days, as the criminals are very likely to misuse the copied data for targeted social engineering attacks.

(des)