Digital storage giant Western Digital has confirmed that an “unauthorized third party” accessed its systems and stole personal information from customers of its online store.
“This information included customer names, billing addresses, shipping addresses, email addresses and phone numbers,” the San Jose-based company said in a disclosure last week.
“In addition, the database contained hashed and salted passwords and partial credit card numbers in encrypted form. We will be contacting affected customers directly.”
The development comes just over a month after Western Digital revealed a “network security incident” on March 26, 2023 that prompted the company to take its cloud services offline.
A subsequent TechCrunch report last month said the attackers behind the attack had “approximately 10 terabytes of data” and demanded a “minimum eight-digit” ransom to avoid exposing the information. It was revealed that they were in talks with Western Digital.
Although the identity of the extortionist was unknown at the time, the ALPHV (aka BlackCat) ransomware attacker has since earned the trust As for the theft, an ultimatum must be issued on April 18, 2023 to pay or risk the release of “important documents” and “valuable artifacts.”
Learn how to stop ransomware with real-time protection
Join our webinar to learn how real-time MFA and service account protection can stop ransomware attacks.
Save my seat!
The attackers have also released various screenshots on the dark web portal, and used the Western Digital incident to demonstrate continued access to Western Digital’s systems after the hack came to light. Viewing what appears to be video calls, emails, and documents related to response efforts. .
Western Digital is aware of the publication of “other Western Digital suspected information,” is “investigating the validity of this data,” and “controls our digital certificate infrastructure.” said.
We are also taking steps to take our online store offline and will be back up and running the week of May 15, 2023. His access to My Cloud services was restored on April 13, 2023.
