HMD Global confirmed that no personally identifiable information gleaned from Nokia-branded phones was shared with any third party. The company made the statement after the Finnish data protection arbitrator found evidence of a data breach related to the Nokia 7 Plus model. Nokia-branded mobile phones are developed under license by Finland’s HMD Global. All device data of Nokia Phones other than the China variant get stored at HMD’s servers in Singapore, provided by Amazon Web Services.
HMD explained that it mistakenly included a different country variant of its software package in a single batch of Nokia 7 Plus phones. Due the mistake, the phones tried to send device activation data to a third party service. The data was never processed however, and no one could have been identified based on the data. This error was identified and fixed in February by switching the client to the right country variant. All affected devices have received the fix and nearly all devices have already installed it. No other Nokia phones were impacted by the software variant, HMD reiterated.
“HMD Global takes the security and privacy of its consumers seriously and complies with all applicable privacy laws. Data collected from our devices is stored safely in accordance with applicable laws,” the company said.
