Shulou(Shulou.com)11/24 Report--

CTOnews.com, May 8 (Xinhua) data storage giant Western Digital (Western Digital) was hacked in March this year, claiming to have stolen approximately 10TB important data, including a large amount of customer information, and urged Western Digital to start negotiations for a ransom of at least eight-figure dollars.

Western Digital issued an official announcement on May 5, acknowledging that a "third party" had accessed a database containing information about Western Digital's online store. CTOnews.com attached the following announcement:

On March 26, 2023, we discovered a network security incident in which unauthorized third parties gained access to multiple systems of the company.

On April 2, 2023, we implemented incident response after discovering this incident and initiated an investigation with the assistance of security industry experts. The survey is ongoing and includes an analysis to understand the nature and scope of data obtained by unauthorized parties.

As a precaution to protect our business operations, the company took the initiative to disconnect systems and services from the public Internet. We are gradually completing the recovery process, and most of the affected systems and services are now operational. Our factory has been operating throughout the incident and is delivering products to meet the needs of our customers. Although initially affected by our initiative, My Cloud services were restored as of April 13, 2023. Access to Western Digital's online store is also affected and is expected to resume in the week of May 15, 2023.

We work with external forensics experts to confirm that the unauthorized party has obtained a copy of the database for our online store, which contains some personal information about online store customers. This information includes customer name, billing address and shipping address, e-mail address and phone number. In addition, the database contains hash and obfuscation passwords in encrypted format, as well as some credit card numbers. We will communicate directly with the affected customers.

With regard to reports of possible fraudulent use of digital signature technology allegedly belonging to Western Digital in consumer products, we can control the digital certificate infrastructure. If precautions need to be taken to protect customers, we can revoke the certificate as needed.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.