F500 Tech & Semiconductors · Computers, Office Equipment · Data breach
Western Digital
Headline
Confirmed 2023 incident: after a network intrusion identified March 26, 2023, an unauthorized party copied Western Digital's online-store customer database, and My Cloud services were offline for about ten days.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
Confirmed 2023 incident: after a network intrusion identified March 26, 2023, an unauthorized party copied Western Digital's online-store customer database, and My Cloud services were offline for about ten days. Western Digital does have a genuine consumer relationship through external drives and network storage, and the category note worth recording is that consumer network-attached storage devices have repeatedly been the subject of security advisories requiring users to disconnect them from the internet - a remediation instruction that arrives by email or press release and that most owners never see, because a storage device is not something people expect to require patching. Recommend a follow-up on WD's advisory history and end-of-support policy for consumer NAS products.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected.
Data sharing
CONFIRMED 2023 BREACH: Western Digital identified a network security incident on March 26, 2023; an unauthorized party obtained a copy of its online-store database (customer names, billing/shipping addresses, emails, phone numbers, hashed and salted passwords, partial card numbers), customers were notified May 5, 2023, and My Cloud, My Cloud Home and related services were offline in early April 2023. Beyond that incident, most semiconductor/component manufacturers sell primarily to OTHER BUSINESSES (device makers, cloud providers) rather than directly to consumers, meaning individual exposure is typically indirect (as a user of a device containing this company's chips) rather than through a direct account relationship — recommend checking specifically for any consumer-facing software/account products this company operates (e.g., driver-download portals, developer accounts).
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy See Western Digital's own published privacy policy | Not fetched yet | NOT CONFIRMED |
| Terms of service See Western Digital's own published terms of service | Not fetched yet | NOT CONFIRMED |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.