Early this morning I received an email from Western Digital to alert me that they have hacked and their database containing user information has been lifted. Although the first article about this on WD's site dates back to the beginning of April, this is the first I've heard about it.
Western Digital Provides Information on Network Security Incident - Western Digital
Western Digital Provides Update on Network Security Incident - Western Digital
Western Digital Provides Information on Network Security Incident - Western Digital
Western Digital Provides Update on Network Security Incident - Western Digital
In collaboration with outside forensic experts, we confirmed that an unauthorized party obtained a copy of a Western Digital database used for our online store that contained some personal information of our online store customers. This information included customer names, billing and shipping addresses, email addresses and telephone numbers. In addition, the database contained, in encrypted format, hashed and salted passwords and partial credit card numbers. We will communicate directly with impacted customers.
We are aware that other alleged Western Digital information has been made public. We are investigating the validity of this data and will continue reporting our findings as appropriate.