Western Digital My Cloud is the victim of a cyberattack

Western Digital is a California-based company that specializes in hard drives and data storage solutions. It just suffered an attack that caused the temporary shutdown of the My Cloud remote access service (March 26, 2023). The latter makes it easy to share files over the Internet from a NAS.

WD My Cloud is a victim of hacking

Last Monday, Western Digital confirmed that it had suffered a major cyberattack. Hackers could have broken into their servers and accessed sensitive data. The exact details are not yet known, but it appears that the thugs managed to obtain credentials from the users.

The manufacturer said it has taken steps to secure its systems and protect its users’ data. Western Digital has published all of its security protocols. The company said it was working with authorities to investigate the attack and identify those responsible. The attack once again confirms the vulnerability of companies to cyberattacks and the need to enhance the security of IT systems.

Western Digital has (temporarily) shut down the My Cloud service, to the inconvenience of many users. On Tuesday, April 3, the official website displayed this information: We are currently experiencing a service outage that is preventing customers from accessing My Cloud, My Cloud Home Duo, My Cloud OS5, SanDisk ibi, and the SanDisk Ixpand Wireless Charger service. Our team is working urgently to resolve the issue and restore access as quickly as possible. We apologize for any inconvenience this may cause. This matter and we thank you for your patience.. These services should be restored as quickly as possible, but this attack highlights the dangers of relying on online services and the importance of taking measures to protect your data. At the moment, no information has been disclosed regarding the nature of the incident or the source of this cyberattack. Nor was it disclosed how the systems were hacked. We only know that an unauthorized third party can access a certain amount of data within their system without knowing its scope.

This attack highlights the need to diversify storage/backup solutions to avoid relying exclusively on online services that may be vulnerable to cyberattacks.

source