Intel Investigates as 20GB of Internal Data is Leaked

Intel is currently looking into how 20GB of sensitive internal data came to find its way online.

The range of documents — some marked “confidential,” “under NDA” or “restricted secret”— were uploaded to file hosting service MEGA by Swiss Android developer Till Kottmann.

Before his account was suspended by Twitter, Kottmann explained on the site that “most of the things here have not been published anywhere before.”

They include details on chip roadmaps, development and debugging tools, schematics, training videos, process simulator ADKs, sample code, Bringup guides and much more.

Affected platforms include Kaby Lake, Snow Ridge, Elkhart Lake and the unreleased 10nm Tiger Lake architecture.

Kottmann claimed to have received this data from a third party who found it on an unsecured server via a simple nmap scan. Many of the zip files were reportedly protected with easy-to-guess or crack passwords.

However, Intel doesn’t believe the data came from a network breach, and said in a brief statement that it is urgently investigating what may have happened.

“The information appears to come from the Intel Resource and Design Center, which hosts information for use by our customers, partners and other external parties who have registered for access,” it continued. “We believe an individual with access downloaded and shared this data."

Although there appears to have been no personally identifiable information (PII) exposed in the breach, the compromise of so many sensitive internal documents will be ringing alarm bells at the chipmaker’s HQ — especially as more leaks have been promised.

Erich Kron, security awareness advocate at KnowBe4, said the incident highlights supply chain ..

Support the originator by clicking the read the rest link below.