Western Digital’s My Cloud service is back online, hacker claims theft

Western Digital’s My Cloud service is back online, allowing users to view files on their My Cloud NAS through an internet connection. The service was offline for almost two weeks after a hack on Western Digital. A hacker claims to have stolen 10TB of data in that attack.

The My Cloud service has been offline since April 2, although the company did inform users on April 7 about a workaround to view files on a nas via the local network, with Local Access. Since Thursday, this workaround is no longer necessary and the My Cloud service is back online. This also applies to services such as SanDisk ibi and SanDisk Ixpand Wireless Charger.

Western Digital took these services offline following a cyber attack. Taking the services offline was part of “proactive security measures.” It is not clear if and what Western Digital has changed in the meantime about the services to make them more secure and how they were linked to the cyber attack.

The attack took place on March 26 and gave unauthorized access to a number of systems. In addition, ‘certain data’ has been captured, although the company has not yet gone into details about this. One of the hackers has contacted TechCrunch and claims against this medium that 10TB of data has been stolen. It is not clear who the hackers are. The hacker shared a file with a digital certificate from Western Digital and claims to be able to provide files with such a certificate after the attack. Outside security experts confirm to TechCrunch that this certificate appears to be from Western Digital.

The hacker also claims to have stolen customer data, telephone numbers, internal emails and other data, and to have access to internal tools, such as an account on storage service Box. The hacker still claims to have access to Western Digital’s internal network. Apart from the digital certificate, the hacker’s claims cannot be verified. The company would not confirm or deny the hacker’s claims. The hacker wants ‘an eight-figure amount’ from the company and says otherwise to leak data.