In a recent press release, Western Digital (WD) said that an unauthorized party accessed a database containing information about its online store. The information stored in the database included customer names, billing and shipping addresses, email addresses, and phone numbers.
The attackers also gained access to encrypted databases, passwords and some credit card numbers. The company said it would contact affected customers directly.
The statement also mentioned that the hacker shared a file digitally signed with a Western Digital code signing certificate, suggesting that the hacker was able to digitally sign files to impersonate the company. Two security researchers investigated and verified the data. Western Digital said it was investigating the validity of the data. The hacker said he downloaded about 10TB of data in the system breach.
Western Digital admits hackers stole sensitive user information
In early April, Western Digital admitted that its network system was hacked on March 26, 2023 and certain data was obtained.
WD took the systems offline while it investigated the attack, which led to the My Cloud online storage service being down for about 10 days in April. The company’s online store remains down, but Western Digital said it would reopen on May 15.
Source link
Comment (0)