• A trove of data allegedly gleaned from AMD is being sold on the dark web.
• AMD says it’s heard the rumours and is working with the relevant parties to address the rumours.
• The data is being sold on BreachForums, which was shuttered earlier this year by the FBI and then rose from the dead weeks later.

Cybercriminals allegedly have a trove of data they gleaned from AMD that they are looking to sell.

As reported by The Register, a group or individual going by IntelBroker is selling data they claim to come from AMD on BreachForums on the Dark Web. The data reportedly includes customer databases, upcoming product specification and plans, internal financial figures, source code, firmware, and staff information.

However, it’s not clear whether the data that is being sold is legitimate. Bleeping Computer states that the seller did post a screenshot of the data they have but didn’t disclose the price or how this data was obtained.

AMD has said that it’s aware that cybercriminals are claiming to have sensitive data and its working with law enforcement officials as well as a third-party hosting partner to investigate the claim.

It’s possible that this isn’t new data but IntelBroker seemingly has a good track record when it comes to getting their hands on stuff they shouldn’t. The cybercriminal reportedly breached DC Health Link, exposing the personal data of members of the US House of Representatives.

It’s also not clear who would buy this data. While the employee database might be valuable for phishers and others, product specifications and plans are only really valuable to other chipmakers. Even if a chipmaker looks at this leaked data, if anything resembles AMD’s IP, it could land them in legal trouble so it’s far too much of a risk for those folks to buy this data.

The fact that extortion isn’t being used also means that IntelBroker wants to make money fast and it’s likely that’s exactly what they want to do.

This is because BreachForums is the red cloth to the bull of law enforcement. The dark web forum was shut down earlier this year by the FBI, only for it to rise from the dead weeks later.

With that in mind, we’re sure AMD wants to make sure its data isn’t sold so it may try to inspire law enforcement to amp up its efforts in a bid to shut the forum, and IntelBroker down.