Western Digital has taken its store offline and sent customers data breach notifications after confirming that hackers stole sensitive personal information in a March cyberattack.
The company emailed the data breach notifications late Friday afternoon, warning that customers' data was stored in a Western Digital database stolen during the attack.
"Based on the investigation, we recently learned that, on or around March 26, 2023, an unauthorized party obtained a copy of a Western Digital database that contained limited personal information of our online store customers," Western Digital said.
"The information included customer names, billing and shipping addresses, email addresses, and telephone numbers. As a security measure, the relevant database stored, in encrypted format, hashed passwords (which were salted) and partial credit card numbers."
The data breach notification comes after Western Digital suffered a cyberattack on March 26th, when the company discovered its network was hacked and company data was stolen.
In response to the attack, the company shut down its cloud services for two weeks, along with mobile, desktop, and web apps.
TechCrunch reported that an "unnamed" hacking group breached Western Digital, claiming to have stolen ten terabytes of data.
While the threat actors claim not to be part of the ALPHV ransomware operation, they used their data leak site to extort Western Digital, linking them in some manner to the extortion gang.
Source: Western Digital says hackers stole customer data in March cyberattack
The company emailed the data breach notifications late Friday afternoon, warning that customers' data was stored in a Western Digital database stolen during the attack.
"Based on the investigation, we recently learned that, on or around March 26, 2023, an unauthorized party obtained a copy of a Western Digital database that contained limited personal information of our online store customers," Western Digital said.
"The information included customer names, billing and shipping addresses, email addresses, and telephone numbers. As a security measure, the relevant database stored, in encrypted format, hashed passwords (which were salted) and partial credit card numbers."
The data breach notification comes after Western Digital suffered a cyberattack on March 26th, when the company discovered its network was hacked and company data was stolen.
In response to the attack, the company shut down its cloud services for two weeks, along with mobile, desktop, and web apps.
TechCrunch reported that an "unnamed" hacking group breached Western Digital, claiming to have stolen ten terabytes of data.
While the threat actors claim not to be part of the ALPHV ransomware operation, they used their data leak site to extort Western Digital, linking them in some manner to the extortion gang.
Source: Western Digital says hackers stole customer data in March cyberattack
