Data Exposure Incident: Cooler Master’s User Information Compromised

You might be familiar with Cooler Master for its PC cooling components, but the company has also expanded into PC cases, peripherals, and other hardware categories over the past few years. If you’re a customer of the company, and especially if you’ve had to use its website for warranty information, you might be affected by a new data breach.

Cooler Master has officially confirmed a data breach that occurred on May 19th. The breach exposed sensitive customer data, including personal information and product details. A threat actor known as “Ghostr” has apparently claimed responsibility for the breach, stating that they had accessed the company’s Fanzone website and downloaded over 103GB of data. This data allegedly includes information from over 500,000 Cooler Master customers.

The data samples included product information, employee information, emails with vendors, and customer details such as names, email addresses, phone numbers, and physical addresses. However, no credit card information was found in the samples, despite claims to the contrary by the malicious actor who performed the breach. Still, you might want to check and see if you might be affected.

Cooler Master has assured customers that they have alerted authorities and engaged security experts to investigate the breach and implement additional security measures. The company is also in the process of notifying affected customers directly and advising them on appropriate next steps. If you are affected, then you should eventually receive a message from Cooler Master, presumably stating which data was leaked and what steps to take to get yourself secured, if you need to take any.

The threat actor has indicated their intention to sell the leaked data on hacking forums. In the meantime, while it doesn’t look like any delicate credit card information was leaked, you should still keep an eye for any unauthorized charges if you happened to have your credit card linked to your Cooler Master account. In addition to this, stay vigilant for any emails that might look suspicious, as malicious actors might use your email to target you for phishing campaigns.

Source: Bleeping Computer

Also read: