2023-04-03 WESTERN DIGITAL CORP Cybersecurity Incident

Page last updated on September 29, 2025

WESTERN DIGITAL CORP initially disclosed a cybersecurity incident in an SEC 8-K filing on 2023-04-03 06:07:00 EDT.

Incident Details

Material: Unknown
Is Breach: Yes
Records Compromised: Unknown
Data Types Impacted: Credit card number, Password, Phone Number, Email, Home address, Name

Compromised Date: Unknown
Detected Date: 2023-03-26
Disclosure Date: 2023-04-02
Contained Date: Unknown
Recovered Date: Unknown

Attack Goal: Unknown
Attack Tactics¹: TA0001, TA0010
Attack Techniques¹: OTHER, T1213

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2023-04-03

WESTERN DIGITAL CORP filed an 8-K at 2023-04-03 06:07:00 EDT
Accession Number: 0001193125-23-088802

Item 8.01 Other Events.

On April 2, 2023, Western Digital Corporation ("Company") issued a press release regarding a network security incident involving Company systems. A copy of the press release is attached hereto as Exhibit 99.1.

Exhibit No. 99.1

Press Release issued by Western Digital Corporation, dated April 2, 2023 regarding a network security incident

Western Digital Provides Information on Network Security Incident SAN JOSE, Calif. - April 2, 2023 - Western Digital Corp. (NASDAQ: WDC) today provided information regarding a network security incident involving some of its systems and the Company's active response to this matter. On March 26, 2023, Western Digital identified a network security incident involving Western Digital's systems. In connection with the ongoing incident, an unauthorized third party gained access to a number of the Company's systems. Upon discovery of the incident, the Company implemented incident response efforts and initiated an investigation with the assistance of leading outside security and forensic experts. This investigation is in its early stages and Western Digital is coordinating with law enforcement authorities. The Company is implementing proactive measures to secure its business operations including taking systems and services offline and will continue taking additional steps as appropriate. As part of its remediation efforts, Western Digital is actively working to restore impacted infrastructure and services. Based on the investigation to date, the Company believes the unauthorized party obtained certain data from its systems and is working to understand the nature and scope of that data. While Western Digital is focused on remediating this security incident, it has caused and may continue to cause disruption to parts of the Company's business operations. The Company will provide updates as appropriate.

8-K filed on 2023-05-05

WESTERN DIGITAL CORP filed an 8-K at 2023-05-05 17:11:22 EDT
Accession Number: 0001193125-23-137241

Item 8.01 Other Events.

On May 5, 2023, Western Digital Corporation ("Company") issued a press release regarding an update on a network security incident involving Company systems. A copy of the press release is attached hereto as Exhibit 99.1.

Exhibit No. 99.1

Press Release issued by Western Digital Corporation, dated May 5, 2023 regarding an update on a network security incident

Western Digital Provides Update on Network Security Incident

SAN JOSE, Calif. - May 5, 2023 - Western Digital Corp. (NASDAQ: WDC) today provided an update on a network security incident involving the Company's systems.

On March 26, 2023, we identified a network security incident where an unauthorized third party gained access to a number of the Company's systems.

On April 2, 2023, we disclosed that upon discovery of this incident, we implemented incident response efforts and initiated an investigation with the assistance of leading security industry experts. This investigation is underway and includes analysis to understand the nature and scope of data obtained by the unauthorized party.

As a precautionary measure to secure our business operations, the Company proactively disconnected our systems and services from the public Internet. We are progressing through our restoration process and the majority of our impacted systems and services are now operational. Our factories are and have been operational throughout this incident and we are shipping products to meet our customers' needs. While initially impacted by our proactive measures, as of April 13, 2023, My Cloud service was restored. Account access to Western Digital's online store also was impacted and is expected to be restored the week of May 15, 2023.

In collaboration with outside forensic experts, we confirmed that an unauthorized party obtained a copy of a Western Digital database used for our online store that contained some personal information of our online store customers. This information included customer names, billing and shipping addresses, email addresses and telephone numbers. In addition, the database contained, in encrypted format, hashed and salted passwords and partial credit card numbers. We will communicate directly with impacted customers.

We are aware that other alleged Western Digital information has been made public. We are investigating the validity of this data and will continue reporting our findings as appropriate.

Regarding reports of the potential to fraudulently use digital signing technology allegedly attributed to Western Digital in consumer products, we can confirm that we have control over our digital certificate infrastructure. In the event we need to take precautionary measures to protect customers, we are equipped to revoke certificates as needed. We'd like to remind consumers to always use caution when downloading applications from non-reputable sources on the Internet.

Company Information