News

Western Digital Data Hit By Cyber Attack: 10 TB Customer Data Stolen By Hackers

Cybercrime: Hackers have stolen nearly 10TB of data from a data storage leader that contains customer information. Western Digital has taken its store offline and sent customer data breach notifications that the data has been stolen by the hackers in a March Cyber attack.

According to the sources, hackers are demanding ransom in “minimum 8 figures” in a commitment to not leak the customers’ personal information.

Moreover, according to the news, the hacker spoke and provided details about the data breach.
” The hacker shared a file that was digitally signed with Western Digital code-signing certificate, showing they could digitally sign files to impersonate Western Digital”.

Moreover, the hackers also revealed phone numbers allegedly belonging to several company executives. The hackers were so acknowledged of the entire system that they were able to steal data from the company’s SAP back office. A back-end interface that helps companies manage e-commerce data.

In addition, Western Digital informed via email of the data breach notifications late Friday afternoon. They confirmed that customers’ data was stored in a Western Digital database stolen during the attack.

As per Western Digital, “based on the investigation, we recently learned that on around March 26, 2023, am unauthorized party obtained a copy of a Western Digital Database that contained limited personal information of our online store customers”.

In addition, the company also stated that” the information included customer names, billing and shipping addresses, email addresses, and telephone numbers. As a security measure, the relevant database stored, in an encrypted format, hashed formats d partial credit card numbers”.

Western Digial

Western Digital Data Breach Notifications

During the investigation, Western Digital Closed its stores, with the message for customers displaying “We will be back soon. We are unable to process orders at this time”.

The company is currently working on the project and investigating the details and will restore its operations on May 15, 2023.

After the attack, the company has become very conscious and aware of its customers to be vigilant against spear-phishing attacks. In which threat actors pose as the company and use the data they have obtained to collect more personal information from clients.

The Western Digital Cyber Attack

The data breach information comes after Western Digital experienced a cyber attack on March 26th. When Western Digital discovered that its data has been hacked by the attackers.

In response to the attack, the company has decided to close its operations for around two weeks along with mobile, desktop, and web apps.

According to the sources, the hacking group has stolen nearly ten terabytes of data. While the threat actors claim not to be part of the ALPHV ransomware operations.

Moreover, in a note published on April 28th, the attackers tainted Western Digital by revealing the images/screenshots of stolen emails, applications, and documents, which showcased that hackers have still used the data after being detected.

The attackers were also so confident about stealing SAP Backoffice database containing customer information and shared a screenshot of what customer invoices actually have.

Since then, the threat actors have not released any further information, which suggests that they are still extorting Western Digital in the hopes of recovering a ransom demand.

Read more:

GPT-4 Can’t Stop Helping Hackers Build Cybercriminal Tools

Best Cybersecurity Jobs In High Demand In 2023

 

 

 

Sponsored
Senoria Khursheed

Leave a Comment
Share
Published by
Senoria Khursheed

Recent Posts

Microsoft Launches AI-Powered “Support Virtual Agent” for Xbox Users

Microsoft has launched its AI-powered “Support Virtual Agent” chatbot for Xbox Insiders in the U.S.,…

10 hours ago

Musk Says Tesla Won’t Enter Smartphone Market Unless Necessary

Android Authority recently polled its users to find out if they would purchase a Tesla…

10 hours ago

Sukkur IBA Sets Seven Conditions for Conducting MDCAT

The Secretary of the Sukkur IBA Testing Agency has formally requested urgent action from the…

10 hours ago

PSEB Opens Bidding for Nationwide e-Rozgar Centers

The Pakistan Software Export Board (PSEB) has launched a nationwide program to encourage IT startups…

11 hours ago

Google Play Services Bug Disrupts Access to Apps for Pixel Users: Here’s How to Fix It

A significant issue with Google Play Services has left many Pixel users unable to access…

11 hours ago

WhatsApp Beta Partners with Google for Innovative Image Search Feature

When it comes to Android messaging apps, WhatsApp stands out as one of the best.…

11 hours ago