Intel is investigating a massive data breach after more than 20 GB of highly confidential and secret data was leaked and uploaded on the file-sharing site Mega. The data was published by Till Kottmann who is a Swiss software engineer. Kottmann said he received the files from an anonymous hacker who claimed to have breached Intel earlier this year.
Kottmann manages a popular Telegram channel where leaked data from major tech companies is shared. The data is leaked because of misconfigured Git repositories, cloud servers, and online web portals. Kottmann said that the hacker has even more data and the says that the hacker says there is more to come soon. The hacker dubbed the data release as ‘Ex Confidential Lake’.
The breached data reportedly includes everything from Intel presentation templates to BIOS code and debugging tools and would represent one of the biggest intellectual property leaks from a chipmaker in years. Intel’s Resource and Design Center is a website dedicated to providing the company’s partners with NDA documentation for product integration purposes. This means that the data spans different parts of the Intel corporation.
Below is the full list of documents leaked so far.
- Intel ME Bringup guides + (flash) tooling + samples for various platforms
- Kabylake (Purley Platform) BIOS Reference Code and Sample Code + Initialization code (some of it as exported git repos with full history)
- Intel CEFDK (Consumer Electronics Firmware Development Kit (Bootloader stuff)) SOURCES
- Silicon / FSP source code packages for various platforms
- Various Intel Development and Debugging Tools
- Simics Simulation for Rocket Lake S and potentially other platforms
- Various roadmaps and other documents
- Binaries for Camera drivers Intel made for SpaceX
- Schematics, Docs, Tools + Firmware for the unreleased Tiger Lake platform
- (very horrible) Kabylake FDK training videos
- Intel Trace Hub + decoder files for various Intel ME versions
- Elkhart Lake Silicon Reference and Platform Sample Code
- Some Verilog stuff for various Xeon Platforms, unsure what it is exactly.
- Debug BIOS/TXE builds for various Platforms
- Bootguard SDK (encrypted zip)
- Intel Snowridge / Snowfish Process Simulator ADK
- Various schematics
- Intel Marketing Material Templates (InDesign)
- And many more.
Intel has responded to the leak with the following official statement.
We are investigating this situation. The information appears to come from the Intel Resource and Design Center, which hosts information for use by our customers, partners and other external parties who have registered for access. We believe an individual with access downloaded and shared this data.
Intel has confirmed that so far, there is no sign of any customer data being leaked as part of the recent data breach. This leak deals another blows to Intel, who is already struggling in many sectors of the Industry.
