Western Digital Hit by Network Security Breach – Critical Services Disrupted!

Apr 03, 2023Ravie LakshmananCyber Attack / Data Security

Data storage devices maker Western Digital on Monday disclosed a
“network security incident” that involved unauthorized access to
its systems.

The breach^[1]
is said to have occurred on March 26, 2023, enabling an unnamed
third party to gain access to a “number of the company’s
systems.”

Following the discovery of the hack, Western Digital said it has
initiated incident response efforts and enlisted the help of
cybersecurity and forensic experts to conduct an investigation.

It also said it’s coordinating with law enforcement agencies on
the matter, adding the probe is in its initial stages.

The company has taken several of its services offline, noting
that the threat actor may have obtained “certain data from its
systems” and that it’s working on estimating the nature and scope
of the data accessed.

While Western Digital did not reveal the exact services that are
impacted, the My Cloud status page^[3]
shows that cloud, proxy, web, authentication, emails, and push
notification services are down.

“Western Digital is currently experiencing a service outage
impacting the following products: My Cloud, My Cloud Home, My Cloud
Home Duo, My Cloud OS5, SanDisk ibi, SanDisk Ixpand Wireless
Charger,” the company said in a message posted on April 2.