In a recent development, NXP Semiconductors, a prominent chipmaker, has disclosed a data breach that exposed the personal information of some of its customers. The breach came to light when Troy Hunt, the owner of Have I Been Pwned, reported the incident after receiving an email notification from NXP.
According to the email sent by NXP to affected customers, the breach is linked to inactive user profiles on the NXP.com website and occurred on July 11, 2023. The compromised information primarily includes customers’ email addresses, and no other personal data appears to have been impacted by the breach.
Upon discovering the breach, NXP Semiconductors immediately initiated an internal investigation and activated its incident response procedures. The incident response team took swift action to contain the incident and promptly notified relevant authorities.
Although NXP found no evidence suggesting fraudulent use of the exposed data, the company decided to reach out to all affected NXP.com users as a precautionary measure.
NXP emphasized the importance of caution when dealing with unsolicited communications that request personal information or contain specific links. The company stressed that they do not proactively contact users to request personal or confidential data. In case anyone receives an email or call claiming to be from NXP and requesting such information, they are encouraged to report it as phishing and notify relevant authorities as needed.
In a statement to TechCrunch, an NXP Semiconductors spokesperson stated that an “unauthorized party” had gained access to “basic personal information” from a system connected to NXP’s online portal.
This incident serves as a reminder of the ongoing importance of cybersecurity vigilance, and individuals are advised to remain cautious and report any suspicious activity promptly. NXP Semiconductors continues to take steps to enhance its security measures and protect customer data from future breaches.