The Lapsus$ data extortion group has not halted since targeting Nvidia (which was discussed in the May 4th, 2022, FLASH issue). Within the last week, the threat group has also targeted the source code of Samsung Electronics, a South Korean multinational electronics corporation, and Mercado Libre, an Argentine e-commerce company. Late last week, Lapsus$ leaked approximately 190 gigabytes (GBs) of archives containing confidential data that they claimed was from Samsung. Early this week, Samsung did confirm that its network was breached, and that sensitive information was exfiltrated by undisclosed actors. In a statement to Bloomberg, Samsung detailed that “the breach involves some source code relating to the operation of Galaxy devices, but does not include the personal information of our customers or employees”. Meanwhile, Mercado Libre has confirmed that a portion of its source code as well as the data of approximately 300,000 users have been access by unauthorized actors. In a Form 8-K filing, which is used to inform investors and shareholders of events, Mercado detailed that no evidence has been identified that the company’s “infrastructure systems have been compromised or any users’ passwords, account balances, investments, financial information or credit card information were obtained”. The company has yet to detail where the data of 300,000 users was actually stored, but BleepingComputer revealed that this type of information being stored in the source code repos would not be out of the ordinary. CTIX analysis are actively monitoring Lapsus$ for their next move and will provide updates as they are available.