Dell is warning of a data breach, after a hacker claims to have stolen information belonging to about 49 million customers.
The company began sending out email, stating that a Dell portalcontaining customer information related to purchases.
“We are currently investigating an incident involving a Dell portal, which contains a database of limited types of information related to Dell purchases,” the notice specifically states. “We believe there is no significant risk to our customers, given the type of information involved,” it further states.
See also: University System of Georgia: Data breach due to MOVEit attacks
The information exposed in this Dell data breach is:
- Name
- Physical address
- Hardware information and details (service tag, product description, order date, and warranty information)
Fortunately, no financial or payment information, email , or phone numbers have been affected.
Dell said it is working with law enforcement and a cybersecurity firm to investigate the data breach.
The data was found for sale on a hacking forum
An attacker named Menelik attempted to sell a Dell database on Breach Forums on April 28. He said he had stolen data from the computer manufacturer and that this data belonged to “49 million customers and information systems purchased from Dell between 2017-2024.”
See also: DocGo: Cyberattack led to data breach
Dell did not disclose the number of people affected, but it is likely the same incident, since some of the things the hacker match the information listed in the data breach notification.
The Forum post has since been deleted from the site, which could indicate that someone purchased the database.
Dell does not “ believe there is a significant risk to customers ,” but the stolen information could potentially be used in targeted attacks against customers. Email addresses and phone numbers may not have been exposed, but scammers could exploit victims ’ physical addresses to send things like USB drives that infect devices with malware. While this may sound far-fetched, threat actors have carried out similar attacks in the past.
Dell needs to take a number of security measures to prevent a future breach of customer data. It needs to strengthen its incident detection and response processes , implement advanced attack protection systems, and expand its security teams.
See also: Panda Restaurant reveals data breach
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Additionally, stricter policies for access to the company's network and data are necessary. This includes implementing the principle of least necessary access and strengthening authentication and access protocols.
Finally, information security training and awareness-raising is needed to ensure that all employees are aware of the latest threats and best security practices .
Source: www.bleepingcomputer.com
