United States
USA
Western Digital network intrusion disrupts My Cloud and commercial operations
Western Digital identified unauthorized system access on 26 March 2023 and disconnected business systems and public services as a containment measure. Its SEC filings report disruptions to some manufacturing, sales and fulfillment activities, while My Cloud remained unavailable until April 2023 and its online store was affected; factories continued operating.
80
Estimated severity
80 / 100
98
Source reliability
98 / 100
Approximate Date
2023-03-26
Targeted Company
WESTERN DIGITAL
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
No information
Operational Impact
Duration
No information
Financial impact (USD M)
No information
Impact types
Operational disruptionOrder fulfillment or delivery disruptionService unavailability
Affected sectors
ManufacturingRetailTechnology & IT Services
Affected departments
Distribution & FulfillmentInformation TechnologySales
Attack Profile
Attack types
Data exfiltrationUnauthorized access
Attributed threat actors
No information
Sources
Incident Sources
sec.govhttps://www.sec.gov/Archives/edgar/data/106040/000010604023000017/wdc-20230331.htminvestor.wdc.comhttps://investor.wdc.com/static-files/4c2072aa-aa07-4c13-8d27-082460647856westerndigital.comhttps://www.westerndigital.com/pl-pl/company/newsroom/press-releases/2023/2023-04-02-western-digital-provides-information-on-network-security-incident