News

Western Digital Data Hit By Cyber Attack: 10 TB Customer Data Stolen By Hackers

Cybercrime: Hackers have stolen nearly 10TB of data from a data storage leader that contains customer information. Western Digital has taken its store offline and sent customer data breach notifications that the data has been stolen by the hackers in a March Cyber attack.

According to the sources, hackers are demanding ransom in “minimum 8 figures” in a commitment to not leak the customers’ personal information.

Moreover, according to the news, the hacker spoke and provided details about the data breach.
” The hacker shared a file that was digitally signed with Western Digital code-signing certificate, showing they could digitally sign files to impersonate Western Digital”.

Moreover, the hackers also revealed phone numbers allegedly belonging to several company executives. The hackers were so acknowledged of the entire system that they were able to steal data from the company’s SAP back office. A back-end interface that helps companies manage e-commerce data.

In addition, Western Digital informed via email of the data breach notifications late Friday afternoon. They confirmed that customers’ data was stored in a Western Digital database stolen during the attack.

As per Western Digital, “based on the investigation, we recently learned that on around March 26, 2023, am unauthorized party obtained a copy of a Western Digital Database that contained limited personal information of our online store customers”.

In addition, the company also stated that” the information included customer names, billing and shipping addresses, email addresses, and telephone numbers. As a security measure, the relevant database stored, in an encrypted format, hashed formats d partial credit card numbers”.

Western Digial

Western Digital Data Breach Notifications

During the investigation, Western Digital Closed its stores, with the message for customers displaying “We will be back soon. We are unable to process orders at this time”.

The company is currently working on the project and investigating the details and will restore its operations on May 15, 2023.

After the attack, the company has become very conscious and aware of its customers to be vigilant against spear-phishing attacks. In which threat actors pose as the company and use the data they have obtained to collect more personal information from clients.

The Western Digital Cyber Attack

The data breach information comes after Western Digital experienced a cyber attack on March 26th. When Western Digital discovered that its data has been hacked by the attackers.

In response to the attack, the company has decided to close its operations for around two weeks along with mobile, desktop, and web apps.

According to the sources, the hacking group has stolen nearly ten terabytes of data. While the threat actors claim not to be part of the ALPHV ransomware operations.

Moreover, in a note published on April 28th, the attackers tainted Western Digital by revealing the images/screenshots of stolen emails, applications, and documents, which showcased that hackers have still used the data after being detected.

The attackers were also so confident about stealing SAP Backoffice database containing customer information and shared a screenshot of what customer invoices actually have.

Since then, the threat actors have not released any further information, which suggests that they are still extorting Western Digital in the hopes of recovering a ransom demand.

Read more:

GPT-4 Can’t Stop Helping Hackers Build Cybercriminal Tools

Best Cybersecurity Jobs In High Demand In 2023

 

 

 

Sponsored
Senoria Khursheed

Share
Published by
Senoria Khursheed

Recent Posts

‘Pak Hajj’ Mobile App Launched to Assist Pilgrims

A new app called "Pak Hajj" has been released by the Ministry of Religious Affairs…

10 hours ago

Federal Govt Announces Holiday for Schools Amid PTI Protests

ISLAMABAD: The district administration has declared a school holiday for tomorrow in the Federal Capital…

10 hours ago

WhatsApp Faces Restrictions in Pakistan, Confirms NetBlocks

NetBlocks, a renowned global organization monitoring internet activity, has reported that WhatsApp has been blocked…

11 hours ago

PTI Urges Elon Musk for Starlink to Address Internet Connectivity in Pakistan

The Pakistan Tehreek-e-Insaf (PTI) has publicly appealed to Elon Musk to introduce Starlink internet services…

15 hours ago

PTA Set to Initiate Second Phase of Crackdown on Unregistered VPNs

ISLAMABAD: The Pakistan Telecommunication Authority (PTA) has reportedly started testing a new national firewall to…

16 hours ago

13.6% Fall in Pakistan’s Mobile Imports in FY25’s Early Period

During the first four months of the current fiscal year 2024-25, the government imported mobile…

17 hours ago