Nokia confirms data breach leaked third-party code, but its data is safe

• Nokia investigation confirms cyberattack with a third party
• The company says its own data is secure
• It will continue to monitor the situation

Nokia has confirmed a recent data breach did indeed happen, but did not affect its own internal data.

The telecoms giant said it had completed its initial investigation into the incident, confirming that a breach had occured, but that its systems, and data, is intact.

“Our investigation has found no evidence of any of our systems or data being impacted. Our investigations point to a 3rd party security incident, related to a single customized software application,” the company told BleepingComputer.

End of life

An infamous data leaker known as IntelBroker recently posted a new ad on an underground forum, advertising a stolen archive apparently containing data from the telco giant.

The archive was taken from a third party, and was said to contain a large collection of Nokia source code, with the hacker claiming to have stolen Nokia software, SSH keys, RSA keys, BitBucket logins, SMTP accounts, webhooks and hardcoded credentials.

IntelBroker claims to have breached a third-party vendor via a SonarQube server. There, they downloaded sensitive files belonging to multiple companies, including Nokia.

“We have found no evidence that this 3rd party incident would in any way endanger critical Nokia systems or data, including source code, customized software, or encryption keys. Our customers are in no way impacted, including their data and networks,” Nokia added.

The source code IntelBroker leaked was for an application that the third-party built, for a client of Nokia’s. It was supposed to work on only one network, and will not work…