--- title: Samsung compromised by Lapsus$ ransomware description: The Lapsus$ ransomware group has attacked Samsung Electronics, and leaked 190 GB of data — including the source code of bootloaders, activation servers, and trusted applets. canonical_url: https://www.acronis.com/en/tru/posts/samsung-compromised-by-lapsus-ransomware/ locale: en last_updated: 2026-10-27 --- * [Home](https://www.acronis.com/en/tru/) * [Articles](https://www.acronis.com/en/tru/posts/) * [Acronis Threat Research Unit](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/) 10 March 2022 # Samsung compromised by Lapsus$ ransomware The Lapsus$ ransomware group has attacked Samsung Electronics, and leaked 190 GB of data — including the source code of bootloaders, activation servers, and trusted applets. Author: **[Acronis Threat Research Unit](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/)** [Video 1](https://www.youtube.com/watch?v=skk_LJLZfHY) The Lapsus$ ransomware group has attacked Samsung Electronics, and leaked 190 GB of data — including the source code of bootloaders, activation servers, and trusted applets. The Lapsus$ gang is believed to be mainly from Latin America, and has a flair for Portuguese-speaking targets. This newest attack comes after the group [already compromised Nvidia last week](https://www.acronis.com/en-us/cyber-protection-center/posts/nvidia-hit-by-lapsus-ransomware/), where they stole 1 TB of data, leaking the credentials of over 70,000 users as well as other documents, including two old digital signing certificates — which have since been used to digitally sign new malware. Acronis Cyber Protect stops Lapsus$ and other ransomware with its included [Active Protection](https://www.acronis.com/en-us/technology/active-protection/), identifying even never-before-seen threats through advanced behavioral analysis and stopping them before they can harm your systems or data. Related articles [The Gentlemen: A closer look at a not-so-gentle ransomware-as-a- service operation](https://www.acronis.com/en/tru/posts/the-gentlemen-a-closer-look-at-a-not-so-gentle-ransomware-as-a-service-operation/) [Acronis AI Copilot: Adoption is high and growing among MSPs](https://www.acronis.com/en/tru/posts/acronis-ai-copilot-adoption-is-high-and-growing-among-msps/) [Acronis Cyberthreats Update, October 2026](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-october-2026/) [AI agents at work: What Acronis endpoint data reveals about MSP and SMB usage](https://www.acronis.com/en/tru/posts/ai-agents-at-work-what-acronis-endpoint-data-reveals-about-msp-and-smb-usage/)