Dell Confirms Breach of Demo System, Says No Customer Data at Risk
Dell Technologies has confirmed a cyberattack on one of its internal test environments, after the World Leaks extortion group claimed responsibility for breaching the company’s Customer Solution Centers platform.
The platform, used to demo products for potential clients, was accessed earlier this month by threat actors who stole fake test data, internal scripts, and an outdated contact list. Dell says no sensitive customer information was exposed and that the breached environment is completely separated from its operational networks.
“This platform is not connected to any production systems or customer data,” Dell said in a statement. “It exists solely to demonstrate products and run proof-of-concept tests in a controlled, isolated space.”
World Leaks, formerly known as the ransomware group Hunters International, has shifted away from encrypting files and now focuses entirely on data theft and extortion. Since rebranding in January, the group has published stolen data from 49 organizations, though as of now, Dell’s name has not appeared on its leak site.
Despite the breach, Dell’s layered security model appears to have worked as intended. The stolen data includes only “synthetic (fake) data, publicly available datasets used solely for product demonstration purposes or Dell scripts, systems data, non-sensitive information, and testing outputs”.
The company says its investigation is ongoing, but stresses that customers do not need to take action. “Our review shows no risk to customer systems or data,” Dell stated, reiterating that the demo platform was never intended to store proprietary or sensitive information.
“Like many companies, we work tirelessly to combat online criminal activity including those seeking to break into our systems and networks,” the company stated.
React to this headline: