Share this article on:
Ireland’s privacy watchdog has commenced an investigation into the major Dell data breach that occurred earlier this month.
Last week, Dell customers were informed by the PC hardware manufacturer that its systems had been hacked, and that customer data was impacted.
Reports suggest 49 million people were affected in the breach, with details including customer names, customer addresses, details of hardware purchases, warranty details, and service tags all exposed.
Dell affirmed that “there is not a significant risk to our customers given the type of information involved”.
Now, Ireland’s Data Protection Commission (DPC) has confirmed that an investigation is underway.
Speaking with TechCrunch, DPC deputy commissioner Graham Doyle said that it received “a breach notification on [Dell]” and that the issue was “currently under assessment”.
Outside of this, Doyle and the DPC provided no additional details.
The Dell data leak was posted to the now FBI-seized BreachForums by a threat actor by the name of Menelik.
According to another report by TechCrunch, Menelik actually conducted two attacks on Dell by finding a flaw in a Dell portal and scraping customer data, just like the first attack.
The second incident saw customer names, phone numbers, and email addresses exposed.
It is unclear whether or not the data is still accessible, with the FBI having seized BreachForums earlier this week, making the original posts unavailable.
The site seizure occurred overnight on Wednesday (15 May), with the BreachForums site and Telegram both displaying messages from the FBI.
“This website has been taken down by the FBI and DOJ with assistance from international partners,” the message said.
“We are reviewing this site’s backend data. If you have information to report about cyber criminal activity on BreachForums, please contact us.”
Attempts to reach BreachForums are met with an FBI banner displaying the message, as well as the Department of Justice emblem and the profile pictures of the two BreachForums admins, Baphomet and ShinyHunters, but edited to appear behind bars.