{"id":751,"date":"2023-05-08T12:56:40","date_gmt":"2023-05-08T12:56:40","guid":{"rendered":"https:\/\/certerassl.com\/blog\/?p=751"},"modified":"2023-06-05T11:57:17","modified_gmt":"2023-06-05T11:57:17","slug":"western-digital-data-breach-10-tb-customer-data-stolen","status":"publish","type":"post","link":"https:\/\/certera.com\/blog\/western-digital-data-breach-10-tb-customer-data-stolen\/","title":{"rendered":"Western Digital Data Breach – 10 TB of Customer Data was Stolen"},"content":{"rendered":"\n

WD Data Breach – Attackers asked for a Huge \u201c8-Figure\u201d Ransomware<\/h2>\n\n\n\n

Cybercriminals reportedly stole 10 TB of data from Western Digital, a US-based data storage provider and the market leader in data storage, saying that the data contained client information.<\/p>\n\n\n\n

According to news reports, hackers make a ransom demand of “minimum 8 figures”<\/strong> in return for withholding the stolen stuff from being made public online.<\/p>\n\n\n\n

Western Digital reported, “Based on the investigation, we have learned that, on or around March 26, 2023, an unauthorized party gained a copy of a Western Digital database that contained limited personal information of our online store customers\u201d.<\/p>\n\n\n\n

Late Friday afternoon, the organization alerted customers via email about this security breach, informing them that their personal information was included in a Western Digital database that malicious actors had stolen during the activity.<\/p>\n\n\n\n

“The details included the clients’ names, invoicing and delivery addresses, email addresses, and contact information. As a measure of security, the relevant database maintained hashed passwords and partial credit card details in an encrypted format.”<\/p>\n\n\n\n

In a discussion with TechCrunch, one of the cybercriminals discussed the data breach in detail.<\/p>\n\n\n\n

“The hacker shared a file that was digitally signed with Western Digital’s code-signing certificate, proving they could now digitally authenticate files to impersonate Western Digital,” the news story stated.<\/p>\n\n\n\n

Additionally, they could access the company’s SAP Backoffice, a back-end interface designed to help organizations keep track of information related to online sales.<\/p>\n\n\n\n

The hackers reportedly exchanged phone numbers used by several organization executives.<\/p>\n\n\n

\n
\"Western
Western Digital Data-Breach Notifications<\/strong><\/figcaption><\/figure>\n<\/div>\n\n\n

Western Digital is Acting Proactive<\/h2>\n\n\n\n

WD (Western Digital) claimed to be taking vigorous measures to protect its corporate activities. These actions include deactivating systems and services.<\/p>\n\n\n\n

Renowned security and forensic experts supported the organization in initiating an investigation when the security problem was discovered and developing incident response measures, stated Western Digital.<\/p>\n\n\n\n

Stern Digital is acting diligently to repair damaged infrastructure. According to Western Digital, it believes the malicious party accessed specific information from its systems under the investigation conducted. The organization attempts to figure out the nature and scope of the data.<\/p>\n\n\n\n

While Western Digital is concentrating on fixing the security breach, it noted that specific aspects of the organization’s business activities had been affected and may continue to do so. Furthermore, WD advises impacted consumers to be attentive for spear-phishing attempts to harm them, in which cyber actors masquerade as the company and exploit the data they have obtained to collect more personal information from clients.<\/p>\n\n\n\n

Western Digital discovered its network had been breached the day after it had experienced a cyberattack. The company pulled down its cloud services for a period of two weeks, along with its mobile, desktop, and online applications, in response to the incident.<\/p>\n\n\n\n

Recent Vulnerabilities and Attacks of 2023<\/h3>\n\n\n\n