Dell Warns of Data Breach, 49 Million Customers Allegedly Affected

Dell recently experienced a data breach, with a threat actor claiming to have stolen information for approximately 49 million customers. The breach involved a Dell portal containing customer information related to purchases. Dell has assured customers that the stolen data does not include financial or payment information, email addresses, or telephone numbers. The company is working with law enforcement and a third-party forensics firm to investigate the incident.

The threat actor, known as Menelik, attempted to sell the stolen database on the Breach Forums hacking forum. The data reportedly includes information from purchases made between 2017 and 2024. Although the post has been deleted, indicating a possible sale, Dell maintains that there is no significant risk to customers due to the nature of the information involved.

Despite Dell's reassurances, the stolen data could still be used in targeted attacks. Threat actors might use physical mailings with phishing links or media containing malware to exploit the stolen information. Dell advises customers to be cautious of any unsolicited communications claiming to be from the company and to verify their legitimacy directly with Dell.

While Dell believes the risk to customers is minimal, the potential for targeted attacks remains. Customers should stay vigilant and report any suspicious activity to Dell. The company continues to investigate the breach and is taking steps to prevent future incidents.

‍