2023 Western Digital — network intrusion; online-store customer DB copied (Mar); My Cloud outage
Data compromised
Contact, credential hashes, and partial card data as described in WD customer notification materials
Technical writeup
Western Digital publicly confirmed that, beginning March 26, 2023, an unauthorized party accessed its corporate network and that investigation determined attackers obtained a copy of a database supporting its online store operations. Customer-facing communications summarized exposed fields as names, billing/shipping addresses, emails, phones, hashed and salted passwords, and partial payment-card data, alongside broader My Cloud service disruption into April 2023 while containment and restoration progressed.
Root cause
External intrusion into corporate systems exfiltrating e-commerce customer data (per company incident update)