Phones stolen: mysterious firm controls thousands of galaxy s22 ultras
Samsung users are discovering
a shocking truth: they don’t actually own their Galaxy S22 Ultra phones. A shadowy organization, identified as Numero LLC, is secretly managing and controlling thousands of these devices, raising serious privacy concerns and leaving owners locked out of their own hardware.A corporate takeover – uncovered
Reports originating from Android Authority and Reddit users reveal that after factory resets, owners have been presented with a ‘SAMSUNG ADMIN’ app, demanding elevated permissions – a clear sign of corporate control. This isn't a typical enterprise deployment; these devices were purchased directly from Samsung or authorized retailers.
Numero LLC, an entity remaining completely unresponsive to inquiries, appears to be leveraging Samsung’s Knox Manage solution, a system designed for secure device management, but in this case, for surveillance and control. The IMEI numbers of the affected devices are registered under Numero LLC, effectively hijacking the user experience.
The details – a chain of unanswered questions
Images circulating on Reddit detail the extent of Numero LLC’s access: they can monitor activity, applications, and data on compromised devices. The situation is compounded by the fact that Samsung support is unable to remove the restrictions, leaving owners effectively ‘bricked’ – unable to use their phones without granting Numero LLC full administrative rights.
Security vulnerabilities and a lost trail
The devices were initially registered via Samsung’s Knox system, but the root cause lies potentially in a CVE-2026-20978 authorization vulnerability. While a physical exploit is theoretically possible, the current evidence points towards a compromised licensed reseller – a disturbing possibility given Samsung’s stringent reseller approval process. The fact that the Galaxy S22 Ultra is nearing its end-of-life support cycle and receives only quarterly security updates further exacerbates the risk.
A privacy nightmare – no answers, no solutions
What’s truly alarming is the prolonged, undetected access Numero LLC has enjoyed over these devices – potentially for years. The lack of official comment from Samsung and the inability to trace the company are deeply concerning. This isn’t a minor glitch; it’s a systemic failure with significant privacy implications. The situation highlights a critical weakness in device security and the potential for abuse even when utilizing ostensibly secure platforms.
The bottom line: a bricked future
For affected users, the only recourse is to either accept a company-controlled device or scrap the phone entirely. This isn’t a matter of inconvenience; it’s a fundamental breach of trust. Samsung’s apparent indifference to this crisis—particularly when weighed against recent compensation payouts for throttling issues—is a troubling reflection on their commitment to consumer security. The Galaxy S22 Ultra, once a flagship device, is now a stark reminder of how easily digital ownership can be stolen.