2024 Dell — 49M customer records
Data compromised
Names, physical addresses, hardware details, service tags, order numbers, warranty info
Technical writeup
Threat actor Menelik brute-forced 7-digit service tags at 5,000 req/min for 3 weeks. No financial data exposed.
Root cause
Brute-force on partner portal - no rate limiting