Technology
Threat actor claims to have stolen 49 million Dell customer addresses before company found out
Menelik, who claims to have 49 million Dell customer records, told TechCrunch that he hacked into the company’s online portal and stole customer data, including physical addresses, directly from Dell servers.
TechCrunch has verified that a number of the downloaded data matches personal data of Dell customers.
On Thursday, the pc maker sent an email to customers saying it had suffered a knowledge breach involving customer names, physical addresses and Dell order information.
“We believe there is no significant risk to our customers given the type of information involved,” Dell wrote in an email, trying to downplay the impact of the breach by suggesting it doesn’t consider customer addresses to be “highly sensitive” information. .
The attacker stated that he had registered under several different names on a selected Dell portal as a “partner”. Affiliate, he said, means a company that resells Dell services or products. After Dell approved partner accounts, Menelik said it brute-forced customer service tags, which consist of seven digits made up entirely of numerals and consonants. He also said that “any partner” can access the portal they have accessed.
“(I) was sending over 5,000 requests per minute to this site containing sensitive information. Believe it or not, I did this for almost 3 weeks and Dell didn’t notice anything. Nearly 50 million requests… Once I felt I had enough data, I sent multiple emails to Dell and notified them of the vulnerability. It took them almost a week to patch it all up,” Menelik told TechCrunch.
Menelik, who shared screenshots of several emails he sent in mid-April, also said that sooner or later he stopped scraping and didn’t obtain the complete customer database. A Dell spokesperson confirmed to TechCrunch that the company received emails from the threat actor.
The attacker posted a stolen database containing Dell customer data on a well known hacker forum. Forum list was first reported by Daily Dark Web.
TechCrunch confirmed that the threat actor had credible Dell customer data, sharing several names and repair tags of consumers – with their consent – who received a breach notification email from Dell. In one case, the threat actor found a customer’s personal information by searching the stolen data for the customer’s name. In one other case, he was able to find details about one other victim by looking up the serial variety of a selected piece of kit from an order she placed.
In other cases, Menelik was unable to find this information and said he didn’t understand how Dell identified affected customers. “Based on checking the names you provided, it appears they sent this mail to unaffected customers,” the threat group said.
Dell didn’t say who owns the physical addresses. TechCrunch’s evaluation of a sample of downloaded data shows that the addresses appear to refer to the unique purchaser of the Dell hardware, reminiscent of a company purchasing the item for a distant employee. For consumers purchasing directly from Dell, TechCrunch discovered that lots of these physical addresses are also related to the buyer’s home address or other location where the product was shipped.
When we received comment, Dell didn’t dispute our findings.
When TechCrunch sent Dell a series of specific questions based on what the threat actor said, an anonymous company spokesperson said that “prior to receiving the threat email, Dell was already aware of the incident and was investigating it, implementing our response procedures and taking protective actions.” “. steps.” Dell has not provided evidence to support this claim.
“Let us do not forget that this threat actor is a criminal and we have notified law enforcement authorities. We will not be disclosing any information that might jeopardize the integrity of our ongoing investigation or any law enforcement investigation,” the spokesman wrote.
Technology
23andme customers informed about bankruptcy and potential claims – the deadline is July 14
23andme, an infinite of genetic tests, which has been priced on billions, is now moving in bankruptcy in chapter 11 and will notify an incredible deal of and an incredible deal of of current and former clients that they is perhaps entitled to make claims as a component of the restructuring process. The company and 11 of its subsidiaries, including Lemonaid Health and LPRXONE, submitted an application for bankruptcy protection on March 23 this yr in the eastern Missouri district. Customers were notified on Sunday to July 14 of July 14 about claims for losses.
Bankruptcy occurs after a storm of 18 months for 23ndme, marked with a decrease in sales, managerial departures and destructive violation of information, which violated confidential personal data of virtually 7 million users. Violation, publicly disclosed October 2023According to TechCrunch, names, birth years, relationship labels, DNA percentage, participation with relatives, ancestors’ reports and locations. Fallout caused many collective processes and a wave of distrust of customers, which seriously cuts the company coping with the company’s consumers.
Now customers that affected this violation – particularly imposed by 23andme that their information has been violated between May and October 2023 – they’ll submit so -called Civil security incident claim. Those who’ve suffered financial damage or others on account of the violation may make a claim inside the bankruptcy case. Customers with other varieties of complaints not related to cyber attack, paying homage to problems with the results of a DNA test or a teeth service in the company, can submit a separate claim in accordance with General bar date package.
Congress also expressed concerns about the consequences of bankruptcy privacy.
The fall of 23andme was fast by grace, and his misfortunes were intensified by her ambitious but expensive extension in digital health and telemedicine, including $ 400 million The takeover of Lemonaid Health in 2021 was originally aimed toward diversifying 23andme offers, apart from testing consumer DNA, movements tensed 23andme financial resources and didn’t provide the growth needed by the company.
Proposed settlement in the amount of $ 30 million in a related collective lawsuit over a cyber attack stays Due to bankruptcy proceedings. (23andme lawyers claim that the settlement is now disputed when the company is in bankrupt.) Customers who must handle up the right to compensation must provide formal evidence of the claim regardless of their participation in a collective motion.
TechCrunch contacted 23andme to comment.
TechCrunch event
Berkeley, California
|.
June 5
Book now
It was already a turbulent yr for the American semiconductor industry.
The semiconductor industry plays a major role in the “AI race”, which the US appears to be determined, so it’s value being attentive to this: from the appointment of Lip-Bu Tan-which has not waste time to work, attempting to revitalize the Heritage Company-Joe Biden proposing latest rules of exports AI AI along the way that would not or can follow.
Here’s what happened since the starting of the yr.
Power
Last reversal
May 7: Just every week before the “Frame of Artificial Intelligence Diffusion”. According to many media, including Axios AND BloombergThe administration won’t implement restrictions when it was to start out on May 15 and as a substitute works in its own framework.
April
Anthropic doubles the support of chip export restrictions
April 30: Anthropic has doubled because of the limitation of exports of chip systems in the USA, including several corrections to artificial intelligence framework, akin to imposing further restrictions in level 2 and dedication of resources to enforcement. The NVIDIA spokesman rejected, saying: “American companies should focus on innovations and get up to the challenge, instead of telling high stories that large, heavy and sensitive electronics are somehow smuggled in” Baby bugghs “or” next to the lobsters live “.
Planned exemptions at Intel
April 22: Before connecting profits with Q1, Intel said he was planning to release over 21,000 employees. The exemptions were to enhance management, something that the general director of Lip-Bu Tan has long said that Intel must do and help in the reconstruction of the company’s engineering.
The Trump administration further limits the chip export
April 15: The NVIDIA H20 AI chip was hit with the requirement of export license, the company revealed in the SEC application. The company added that it expects for $ 5.5 billion fees related to this latest requirement in the first quarter of the tax yr in 2026. H20 is the most advanced AI Nvidia chip can still export to China in some form or fashion. TSMC and Intel reported similar expenses in the same week.
TechCrunch event
Berkeley, California
|.
June 5
Book now
NVIDIA seems to talk of further export of chips
April 9: According to reports, the general director of Nvidia, Jensen Huang, was noticed for dinner at the Mar-A-Lago Center in Donald Trump. Then, NPR was reported Huang could have the ability to save lots of AI H20 NVIDIA systems from export restrictions after investing in AI data centers in the USA
Alleged agreement between Intel and TSMC
April 3: Intel and TSMC allegedly reached a preliminary agreement on the commencement of a joint project of Chips. This joint undertaking would work in Intel devices, and TSMC would have 20% shares in the latest undertaking. Both firms refused to comment or confirm. If this contract just isn’t accomplished, this might be a good preview of potential offers in this industry.
Intel rotates from non -corporate assets, proclaims a brand new initiative
April 1: CEO Lip-BU TAN immediately worked. Just just a few weeks after joining the Intel, the company announced that it might rotate resources unrelated to the core in order that it could focus. He also said that the company would introduce latest products, including non -standard semiconductors for purchasers.
March
Intel calls the latest CEO
March 12: Intel announced that a veteran of the industry and a former board member, Lip-Bu Tan will return to the company as general director on March 18. At the time of his appointment, Tan said that Intel could be a “engine -oriented company” under his leadership.
February
Intel’s Ohio Chip Plant is delayed again
February 28: This yr, Intel was to start out running its first chip factory in Ohio. Instead, the company slowed down the construction of the plant for the second time in February. Now the design of semiconductors value $ 28 billion won’t end with the construction until 2030 and might even open only in 2031.
Senators call for more chip export restrictions
February 3: US Senators, including Elizabeth Warren (D-Mass) and Josh Hawley (R-MO), wrote a letter to the Secretary for Trade for Howard Lutnicka Calling Trump’s administration for further restriction Export of the AI system. A letter addressed especially to AI H20 NVIDIA systems, which were used during training of the R1 Deepseek “reasoning” model.
January
Deepseek releases its open model “reasoning”
January 27: The Chinese startup Ai Deepseek caused quite mixing in the Silicon Valley when he released the open version of his model “reasoning” R1. Although this just isn’t a special message of semiconductors, the alarm in the AI industry and Deepseek semiconductors meant that it still has an impact on the chip industry.
Order Joe Biden on the export of chip
January 13: Only the incumbent week remained, former President Joe Biden proposed extensive export restrictions on AI systems made by the USA. The order has created a 3 -level structure that determined what number of American systems will be exported to every country. According to this proposal, level 1 countries didn’t face any restrictions; Countries 2 level 2 had a chip purchase limit for the first time; And level 3 countries received additional restrictions.
Dario Amodei from anthropics weighs the limitations of chip exports
January 6: Co -founder of anthropics and general director, Dario Amodei, co -author of opinions The Wall Street Journal Supporting existing control controls of the AI system and indicating them as the reason why the Chinese market of artificial intelligence was in the US. “He also called on the incoming President Donald Trump to impose further restrictions and shutting the gaps that allowed AI to get these tokens in China.
(Tagstranslate) Intel
Josh Raffaella, who has deep roots as an investor of the Silicon Valley and was supported by many firms Elon Musk, suits his former employer, massive trillion dollars Aum Brookfield Asset Management, reports the New York Times.
A major part of Raffaella’s criticism concerns how Brookfield covered losses related to the pandemic of real estate and claims that the company released him after submitting the criticism of informants at SEC. His lawsuit gives allegations akin to fraud and bribe, while Brookfield deny all offenses rapidly, said The Times.
In February, Brookfield quietly closed the Venture Capital unit run by Raffaella and threw some assets on one other unit, Bloomberg reported at the moment. One of Raffaella’s complaints in the lawsuit is that Brookfield didn’t buy so many shares in firms belonging to musk because he provided the possibility of purchase.
Raffaella had shopping transactions in Musk, akin to SpaceX, XAI and a boring company, claims the claim. Bloomberg announced that his Brookfield fund was an awesome supporter of Twitter’s takeover by Musk.
The lawsuit is a really public battle of Raffaella, who previously worked as a partner at VC, known at the time as a drapeer Fisher Jurvetson. (Today it’s a set of funds.) In DFJ Brookfield, it has helped this company spend money on Musk, akin to Solarcity (acquired by Tesla), Spacex and Tesla.
(Tagstranslate) Brookfield
