InfoSecBulletin Cybersecurity for mankind
Western Digital has finally restored the My Cloud service after more than a week following a hack, but those behind the breach claim to have stolen customer data.
The My Cloud service returned on Wednesday, 10 days after Western Digital officially reported an outage that made the online storage platform inaccessible for users.
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
By infosecbulletin
/ Saturday , September 19 2026
Microsoft has fixed a serious security flaw in Azure AI Foundry that could let bad actors gain privilege escalation. The...
Read More
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
By infosecbulletin
/ Friday , September 18 2026
Amazon Web Services cannot restore access to its cloud-computing facility in Bahrain and one of three data-hosting zones in the...
Read More
Cisco Warns of Critical ISE 0-Day Flaw and Hackers Allegedly Selling Fortinet FortiGate 1-Day Flaw
By infosecbulletin
/ Friday , September 18 2026
A threat actor is allegedly offering a private remote code execution exploit for Fortinet FortiGate SSL VPN appliances, claiming that...
Read More
Anthropic prepares “Claude Money” to analyze bank account and financial data
By infosecbulletin
/ Thursday , September 17 2026
Anthropic is making a new Claude feature called “Money.” It's a separate tab in the mobile app. The new interface...
Read More
GhostCode Phishing Kit Evades Microsoft 365 MFA to Hijack Accounts in 78 Seconds
By infosecbulletin
/ Thursday , September 17 2026
GhostCode is a new phishing kit that changes a regular Microsoft 365 sign-in into an account theft. It doesn't need...
Read More
CISA Warns of Cisco Secure Email Gateway 0-Day Flaw Actively Exploited in Attacks
By infosecbulletin
/ Tuesday , September 15 2026
CISA has added a serious Cisco Secure Email Gateway flaw to its list of known exploits. They warn that attackers...
Read More
VPN flaw exposed 246,000 personnel records in japan
By infosecbulletin
/ Tuesday , September 15 2026
Japan’s Digital Agency found a data leak that may have exposed about 246,000 records with personal information of government workers....
Read More
Hackers deploy Casbaneiro Trojan that activates on bank websites
By infosecbulletin
/ Monday , September 14 2026
Casbaneiro is going after online banking users by sending fake messages that seem like urgent bills or legal papers. The...
Read More
German police read Signal, Telegram, WhatsApp messages without breaking encryption
By infosecbulletin
/ Saturday , September 12 2026
German law enforcement agencies are using features built into apps such as WhatsApp to monitor people’s messages without breaking their...
Read More
Urgent Patch! cPanel, GitLab Flaws Expose Users to RCE, File and Credential Theft
By infosecbulletin
/ Friday , September 11 2026
GitLab has released an important security update to fix two serious problems. These issues could allow unauthorized file access and...
Read More
The outage occurred right as Western Digital reported a breach that it first detected on March 26 involving hackers infiltrating the company’s systems and stealing some data. As a “proactive measure,” Western Digital took certain systems and services offline, likely to examine the full scope of the breach and to purge the hackers’ presence.
It’s unclear why My Cloud was down for so long, and what the hackers stole. Western Digital declined to offer any new comment. “This investigation is in its early stages and Western Digital is coordinating with law enforcement authorities,” the company said on April 3.
However, TechCrunch spoke(Opens in a new window) to one of the hackers involved in the breach, who claims 10TB of company data was stolen, including information on customers.
The hacker says they asked Western Digital to pay at least an eight-figure sum or else the stolen data will be published online. However, TechCrunch notes the company appears to have shut down attempts by the hackers to negotiate a payment. It’s also important to note cybercriminals have every incentive to inflate or lie about their claims in order to pressure a company to pay up.
In the meantime, some Western Digital customers are demanding the company be more transparent about the breach and what might’ve been stolen. “We need to know what happened, have our details been compromised and what’s going to happen differently in future!?” wrote(Opens in a new window) one user on Facebook.
