Security News > 2023 > May > Western Digital Confirms Customer Data Stolen by Hackers in March Breach

Digital storage giant Western Digital confirmed that an "Unauthorized third party" gained access to its systems and stole personal information belonging to the company's online store customers.

"This information included customer names, billing and shipping addresses, email addresses and telephone numbers," the San Jose-based company said in a disclosure last week.

The development comes a little over a month after Western Digital divulged a "Network security incident" on March 26, 2023, prompting the company to take its cloud services offline.

A subsequent report from TechCrunch last month revealed that the threat actors behind the attack were allegedly in possession of "Around 10 terabytes of data," and were negotiating with Western Digital for a ransom of a "Minimum 8 figures" to avoid leaking the information.

The actors have also published various screenshots on their dark web portal, displaying what appears to be video calls, emails, and documents related to Western Digital's incident response efforts in an attempt to indicate continued access to the company's systems even after the hack came to light.

Western Digital said it's aware of the publication of "Other alleged Western Digital information," that it's "Investigating the validity of this data," and that it has "Control over our digital certificate infrastructure."

News URL

https://thehackernews.com/2023/05/western-digital-confirms-customer-data.html