Dell Technologies

Dell disclosed a breach exposing customer records at very large scale - reporting cited on the order of 49 million purchase records including names, physical addresses and hardware and order information. Dell's characterisation was that no financial or payment information, email addresses or phone numbers were involved. The exposure route was reportedly a partner portal accessed through registered accounts, which is the same authorisation-abuse structure as the Salesforce campaign: legitimate access used illegitimately, no exploit required. A customer address plus a hardware list is a targeting package for technical support scams.

• Severity
• Evidence tierUnassigned
• Claims confirmed
• Last verified2026-08-04

Primary source. www.bleepingcomputer.com/news/security/dell-api-abused-to-steal-49-million-customer-records-in-data-breach/ — Verified - primary source confirmed.

Arbitration

Not independently confirmed this pass — standard binding arbitration + class action waiver expected for individual consumer purchase agreements.

Contacts

Privacy contact. Not recorded.

Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.

Mailing address. Not recorded.