InfoSecBulletin Cybersecurity for mankind
Western Digital has finally restored the My Cloud service after more than a week following a hack, but those behind the breach claim to have stolen customer data.
The My Cloud service returned on Wednesday, 10 days after Western Digital officially reported an outage that made the online storage platform inaccessible for users.
Russia detects first SuperCard malware attacks via NFC
By infosecbulletin
/ Wednesday , June 18 2025
Russian cybersecurity experts discovered the first local data theft attacks using a modified version of legitimate near field communication (NFC)...
Read More
Income Property Investments exposes 170,000+ Individuals record
By infosecbulletin
/ Tuesday , June 17 2025
Cybersecurity researcher Jeremiah Fowler discovered an unsecured database with 170,360 records belonging to a real estate company. It contained personal...
Read More
ALERT (CVE: 2023-28771)
Zyxel Firewalls Under Attack via CVE-2023-28771 by 244 IPs
By infosecbulletin
/ Tuesday , June 17 2025
GreyNoise found attempts to exploit CVE-2023-28771, a vulnerability in Zyxel's IKE affecting UDP port 500. The attack centers around CVE-2023-28771,...
Read More
CISA Flags Active Exploits in Apple iOS and TP-Link Routers
By infosecbulletin
/ Tuesday , June 17 2025
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently included two high-risk vulnerabilities in its Known Exploited Vulnerabilities (KEV)...
Read More
10K Records Allegedly from Mac Cloud Provider’s Customers Leaked Online
By infosecbulletin
/ Monday , June 16 2025
SafetyDetectives’ Cybersecurity Team discovered a public post on a clear web forum in which a threat actor claimed to have...
Read More
Canada 2nd largest airlines “WestJet” investigates cyberattack disrupting internal systems
By infosecbulletin
/ Sunday , June 15 2025
WestJet, Canada's second-largest airline, is looking into a cyberattack that has affected some internal systems during its response to the...
Read More
Paraguay 7.4 Million Citizen Records Leaked on Dark Web
By infosecbulletin
/ Saturday , June 14 2025
Resecurity found 7.4 million records of Paraguayan citizens' personal information leaked on the dark web today. Last week, cybercriminals attempted...
Read More
High-Severity Flaw in HashiCorp Nomad Allows Privilege Escalation
By infosecbulletin
/ Friday , June 13 2025
HashiCorp has revealed a critical vulnerability in its Nomad tool that may let attackers gain higher privileges by misusing the...
Read More
SoftBank: Over 137,000 personal info leaked
By infosecbulletin
/ Friday , June 13 2025
SoftBank has disclosed that personal information of more than 137,000 mobile subscribers—covering names, addresses, and phone numbers—might have been leaked...
Read More
Alert
Trend Micro Apex One Flaw Allow Attackers to Inject Malicious Code
By infosecbulletin
/ Friday , June 13 2025
Serious security vulnerabilities in Trend Micro Apex One could allow attackers to inject malicious code and elevate their privileges within...
Read More
The outage occurred right as Western Digital reported a breach that it first detected on March 26 involving hackers infiltrating the company’s systems and stealing some data. As a “proactive measure,” Western Digital took certain systems and services offline, likely to examine the full scope of the breach and to purge the hackers’ presence.
It’s unclear why My Cloud was down for so long, and what the hackers stole. Western Digital declined to offer any new comment. “This investigation is in its early stages and Western Digital is coordinating with law enforcement authorities,” the company said on April 3.
However, TechCrunch spoke(Opens in a new window) to one of the hackers involved in the breach, who claims 10TB of company data was stolen, including information on customers.
The hacker says they asked Western Digital to pay at least an eight-figure sum or else the stolen data will be published online. However, TechCrunch notes the company appears to have shut down attempts by the hackers to negotiate a payment. It’s also important to note cybercriminals have every incentive to inflate or lie about their claims in order to pressure a company to pay up.
In the meantime, some Western Digital customers are demanding the company be more transparent about the breach and what might’ve been stolen. “We need to know what happened, have our details been compromised and what’s going to happen differently in future!?” wrote(Opens in a new window) one user on Facebook.
