In a concerning development for Dell Technologies, a threat actor known as Menelik has reportedly accessed and scraped sensitive customer data from a Dell support portal.
This latest security breach, which follows a previous incident involving the theft of physical addresses of 49 million Dell customers, now includes the theft of names, phone numbers, and email addresses.
According to a report by TechCrunch, the compromised data was extracted from customer service reports which also contained details about replacement hardware, parts, and comments from on-site engineers.
Free Webinar on Live API Attack Simulation: Book Your Seat | Start protecting your APIs from hackers
These reports are highly sensitive as they include dispatch numbers and, in some instances, diagnostic logs directly uploaded from customers’ computers.
The newly compromised data includes:
The breach was further compounded by the discovery that some of the service reports included photographs taken by customers, which were uploaded as part of their technical support requests.
Alarmingly, these images contained metadata that revealed the GPS coordinates of the locations where the photos were taken, posing a significant privacy risk.
TechCrunch has verified the authenticity of the stolen data, which paints a grim picture of Dell’s cybersecurity measures.
The initial response from Dell to the first breach was to downplay the severity, stating that the leaked customer addresses did not pose “a significant risk to our customers” and claimed that no highly sensitive information was compromised.
However, this latest incident contradicts those assurances, as it involved detailed customer information.
The hacker, Menelik, exploited another vulnerability in a different Dell portal to carry out this recent data scrape.
He was able to register multiple accounts as a “partner” on the Dell portal, which typically serves companies that resell Dell products or services. Once approved, Menelik used these accounts to brute-force customer service tags to access the data.
Menelik has communicated to TechCrunch that he has no immediate plans to use the stolen data but is waiting to see how Dell responds to the breach. Meanwhile, Dell has not yet responded to requests for comment on this latest security lapse.
This incident raises serious questions about Dell’s data security practices and the measures it takes to protect customer information.
It also highlights the ongoing challenges that large corporations face in safeguarding against determined and sophisticated cyber attackers.
On-Demand Webinar to Secure the Top 3 SME Attack Vectors: Watch for Free
Cybercriminals are increasingly exploiting search engine optimization (SEO) techniques and paid advertisements to manipulate search…
Cybersecurity experts have unearthed an intricate cyber campaign that leverages deceptive websites posing as the…
Hackers are exploiting what's known as "Dangling DNS" records to take over corporate subdomains, posing…
Security researchers and cybersecurity experts have recently uncovered new variants of the notorious HelloKitty ransomware,…
The RansomHub ransomware group has emerged as a significant danger, targeting a wide array of…
Threat actors are increasingly using email bombing to bypass security protocols and facilitate further malicious…