Dell announced today that on November 9, it detected attackers on its systems attempting to extract information from Dell.com and support.dell.com.
According to Dell's breach announcement, unauthorized accounts were detected on its systems. These accounts were attempting to extract information from the website, such as names, email addresses, and encrypted passwords.
“On November 9, 2018, we identified and disrupted attempts to steal information from unauthorized users of Dell.com,” Dell said in a statement. “After identifying the threat, we immediately suspended account activity and initiated an investigation. We have also retained a forensics firm to assist in the investigation and to represent us legally.”
In a second statement, the company said its engineers identified the suspicious accounts the same day they started. A spokesperson declined to comment when asked about the number of accounts affected, saying he could not say yet, as the number was likely zero.
They also stated that no debit or credit card details, or any other sensitive customer information, were targeted. Furthermore, service was not interrupted at the time of the breach, nor later.
While the company itself states that there is no evidence that malicious users have in any way obtained other users' data, Dell recommends that all accounts on its site be reset , while at the same time, for precautionary reasons, the passwords of other sites where users have the same password as Dell.com should also be changed.
