Chipmaker NXP confirms customer data breach

Dutch chipmaker NXP Semiconductors informed customers of a personal data breach.

Have I Been Pwned owner Troy Hunt tweeted a copy of NXP’s breach notification email to alert affected customers. Affected individuals have an online NXP account, which provides technical content and community support.

“With account security features like two-step authentication, NXP secures your account, protects your privacy and maintains your account information,” the NXP account benefits page states.

Andrea Lempart, NXP spokesperson, told that a “unauthorized party” had obtained “basic personal information” from a system connected to NXP’s online portal. This data includes customers’ full names, email addresses, postal addresses, business and mobile phone numbers, company names, job titles and descriptions, and communication preferences.

NXP would not describe the breach or explain why it has only now begun informing affected parties. NXP discovered the intrusion on July 14 after it occurred on July 11.

“We are contacting all affected NXP.com users out of an abundance of caution to ensure they are aware and extend our apologies for any inconvenience this may cause,” the NXP spokesperson said, adding that the company has notified authorities of the breach.

NXP warned affected users to be wary of unsolicited emails requesting personal information or containing links in the email.

In the last news, a security researcher found a flaw in Delhi Metro’s smart card system, which uses NXP chips. The flaw exploits the top-up card’s top-up process to allow free travel on travel systems.