‘an unauthorized third party acquired information from some of Samsung’s U.S. systems,’ says Samsung. The company says it discovered the breach on August 4th, and is currently investigating it with’leading outside cybersecurity firm’.

Samsung says that not everybody will have had the same info leaked. The company did n’t immediately reply to the verge’s request for comment.

If you’ve been putting off activating two-factor authentication on some important accounts, it’s probably not a bad idea to get it done as soon as you can.