Cyberattack Leaves Growing Numbers of Samsung Galaxy S22 Ultra Phones Unusable

A troubling issue is making the rounds among Samsung Galaxy S22 Ultra owners, with multiple reports suggesting some devices are being effectively locked down after a factory reset. While Samsung’s newer Galaxy S26 Ultra hasn’t been in the spotlight for major security emergencies, attention is now turning to the four-year-old Galaxy S22 Ultra as more users describe a scenario that can leave the phone partially or completely unusable.

Here’s what people say is happening. After resetting a Galaxy S22 Ultra to factory settings and completing the initial setup, a warning appears stating, “This Galaxy S22 Ultra isn’t private,” followed by a message indicating the phone is managed by a company and that an administrator may be able to view data stored on the device. The screen and wording point to Knox Mobile Enrollment (KME), Samsung’s enterprise tool that businesses use to enroll and manage large numbers of smartphones.

The alarming part is that the affected devices reportedly belong to private individuals, not companies. Several users mention an unfamiliar organization name tied to the management profile, often shown as “Numero LLC,” which they say they have no connection to and which appears questionable. In some cases, owners report they can’t finish the setup process at all, essentially locking them out of the phone. In other cases, the device may still be usable, but the presence of enterprise management suggests a third party could have elevated control—an extremely risky situation if sensitive information is stored on the device.

According to these user accounts, attempts to resolve the problem have been frustrating. People claim that even with proof of purchase, authorized sellers and customer support have been unable to remove the management lock or restore normal access. As of now, there has been no official public statement addressing these specific reports.

For anyone who encounters the “isn’t private” message or unexpected enterprise management during setup on a Galaxy S22 Ultra, the safest approach is to treat the device as compromised. Contacting Samsung support may be the only available path at the moment, even though some users say it hasn’t led to a fix. Until there’s clearer guidance or an official resolution, continuing to use an affected phone—especially for accounts, banking, private photos, or work data—is strongly discouraged.