Western Digital’s Network Breached, Multiple Services Taken Down

Western Digital has confirmed that its network security was breached and some data was obtained. The company shut down access to some of its systems in an attempt to block the attack, though how successful that action was remains to be seen.

The company confirmed to Reuters that it suffered a breach on April 2 and that an unauthorized party did obtain certain data, but what exactly was compromised was still being ascertained at the time of publication. The incident has also caused disruption to several of the company’s services, including its network attached storage (NAS) services.

“Western Digital is currently experiencing a service outage impacting the following products: My Cloud, My Cloud Home, My Cloud Home Duo, My Cloud OS5, SanDisk ibi, SanDisk Ixpand Wireless Charger,” the company writes on its My Cloud service status page.

“We are working to restore service. We apologize for any inconvenience. Next update will be posted on Monday, April 3.”

The company says that it is taking “proactive measures to secure its business operations” and is working to restore service, but did not provide a timeline. Western Digital has also confirmed that it is investigating the breach with an unnamed cybersecurity firm and working with law enforcement.

The current outage is the longest and most widespread in several years according to the My Cloud service status page.

User access to all devices that require a connection to Western Digital’s network was still not available at the time of publication, more than 24 hours since users first started reporting issues.

This is not the first time in recent memory that Western Digital’s My Cloud services have had issues. In 2021, it was revealed that there were two major exploits in the company’s My Book Live series of products that allowed an outside attacker to remotely wipe the hard drives within the NAS enclosures. One of the exploits had existed in the code since the product was launched.

Western Digital’s solution to the issue was to ask users to upgrade to My Cloud OS5, which did work. That said, OS5 is one of the services currently impacted by the breach of the company’s network.