Notorious threat actor is a well-known figure on the hacking website. He posted an offer to sell a large amount of Nokia internal data, allegedly obtained through a third-party contractor directly cooperating with the telecom giant.

These data are said to include highly sensitive documents such as keys, source code, keys, login information, accounts, and even hardcoded credentials. If verified, they could pose significant risks to Nokia's operations.

The sale post suggests that hackers have broad access to Nokia's proprietary information, potentially exposing the telecom provider's development tools and infrastructure to malicious actors. Detailed information about the stolen data is provided, and it is explicitly stated that only highly reputable senior members on the platform are eligible to bid, emphasizing the perceived value and exclusivity of the information offered.

The sales pitch also mentioned an example "tree file," possibly as evidence of potential buyers being stolen.

Nokia is a global leader in telecommunications, playing a significant role in the global networks, infrastructure, and technology services sectors, with operations spanning multiple countries. Originally established in Finland, the company has grown to become one of the largest and most influential players in the telecommunications industry, particularly in the areas of networks and telecommunications equipment.

Nokia's clientele includes major telecom providers, governments, and private enterprises, making data security paramount. The leakage of source code and internal security keys could enable attackers to exploit vulnerabilities in Nokia's systems, disrupt customer networks, and even tamper with updates and infrastructure. Given Nokia's involvement in global critical infrastructure projects, this is a concerning prospect.

As of now, Nokia has not publicly acknowledged the incident, nor has it confirmed whether internal or contractor-related data has been compromised. The third-party contractor that exposed Nokia also exposed other companies, including online gambling platforms, international luxury brands, reward platforms, and AI-driven healthcare and diagnostic providers. That being said, the exposed companies are likely unaware of this vulnerability and its impact on them.