On March 26, 2023, Western Digital was hit by a network security incident where an unauthorized third party gained access to a number of the company’s systems. The company’s My Cloud service, which has been offline since April 2, was restored as of April 13.
Western Digital confirmed that an unauthorized party obtained a copy of a Western Digital database used for its online store that contained some personal information of its online store customers. This information included customer names, billing and shipping addresses, email addresses and telephone numbers. In addition, the database contained, in encrypted format, hashed and salted passwords and partial credit card numbers. We will communicate directly with impacted customers.
Western Digital also noted:
- The majority of impacted systems and services are now operational.
- Western Digital factories are and have been operational throughout this incident and the company is shipping products.
- Following the breach, certain other information about the company has been made public. Wester Digital investigating the validity of this data and will continue reporting findings as appropriate.
- Regarding reports of the potential to fraudulently use digital signing technology allegedly attributed to Western Digital in consumer products, the company can confirm that it has control over its digital certificate infrastructure.