Connect with us

Technology

Threat actor claims to have stolen 49 million Dell customer addresses before company found out

Published

on

The silhouette of Michael Dell, founder and chief executive officer of Dell Inc.. (Matthew Busch/Bloomberg via Getty Images)

Menelik, who claims to have 49 million Dell customer records, told TechCrunch that he hacked into the company’s online portal and stole customer data, including physical addresses, directly from Dell servers.

TechCrunch has verified that a number of the downloaded data matches personal data of Dell customers.

On Thursday, the pc maker sent an email to customers saying it had suffered a knowledge breach involving customer names, physical addresses and Dell order information.

“We believe there is no significant risk to our customers given the type of information involved,” Dell wrote in an email, trying to downplay the impact of the breach by suggesting it doesn’t consider customer addresses to be “highly sensitive” information. .

The attacker stated that he had registered under several different names on a selected Dell portal as a “partner”. Affiliate, he said, means a company that resells Dell services or products. After Dell approved partner accounts, Menelik said it brute-forced customer service tags, which consist of seven digits made up entirely of numerals and consonants. He also said that “any partner” can access the portal they have accessed.

“(I) was sending over 5,000 requests per minute to this site containing sensitive information. Believe it or not, I did this for almost 3 weeks and Dell didn’t notice anything. Nearly 50 million requests… Once I felt I had enough data, I sent multiple emails to Dell and notified them of the vulnerability. It took them almost a week to patch it all up,” Menelik told TechCrunch.

Menelik, who shared screenshots of several emails he sent in mid-April, also said that sooner or later he stopped scraping and didn’t obtain the complete customer database. A Dell spokesperson confirmed to TechCrunch that the company received emails from the threat actor.

The attacker posted a stolen database containing Dell customer data on a well known hacker forum. Forum list was first reported by Daily Dark Web.

TechCrunch confirmed that the threat actor had credible Dell customer data, sharing several names and repair tags of consumers – with their consent – who received a breach notification email from Dell. In one case, the threat actor found a customer’s personal information by searching the stolen data for the customer’s name. In one other case, he was able to find details about one other victim by looking up the serial variety of a selected piece of kit from an order she placed.

In other cases, Menelik was unable to find this information and said he didn’t understand how Dell identified affected customers. “Based on checking the names you provided, it appears they sent this mail to unaffected customers,” the threat group said.

Dell didn’t say who owns the physical addresses. TechCrunch’s evaluation of a sample of downloaded data shows that the addresses appear to refer to the unique purchaser of the Dell hardware, reminiscent of a company purchasing the item for a distant employee. For consumers purchasing directly from Dell, TechCrunch discovered that lots of these physical addresses are also related to the buyer’s home address or other location where the product was shipped.

When we received comment, Dell didn’t dispute our findings.

When TechCrunch sent Dell a series of specific questions based on what the threat actor said, an anonymous company spokesperson said that “prior to receiving the threat email, Dell was already aware of the incident and was investigating it, implementing our response procedures and taking protective actions.” “. steps.” Dell has not provided evidence to support this claim.

“Let us do not forget that this threat actor is a criminal and we have notified law enforcement authorities. We will not be disclosing any information that might jeopardize the integrity of our ongoing investigation or any law enforcement investigation,” the spokesman wrote.

This article was originally published on : techcrunch.com
Continue Reading
Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Technology

Flipkart co-founder Binny Bansal is leaving PhonePe’s board

Published

on

By

Flipkart co-founder Binny Bansal has stepped down three-quarters from PhonePe’s board after making an identical move on the e-commerce giant.

Bengaluru-based PhonePe said it has appointed Manish Sabharwal, executive director at recruitment and human resources firm Teamlease, as an independent director and chairman of the audit committee.

Bansal played a key role in Flipkart’s acquisition of PhonePe in 2016 and has since served on the fintech’s board. The Walmart-backed startup, which operates India’s hottest mobile payment app, spun off from Flipkart in 2022 and was valued at $12 billion in funding rounds that raised about $850 million last 12 months.

Bansal still holds about 1% of PhonePe. Neither party explained why they were leaving the board.

“I would like to express my heartfelt gratitude to Binny Bansal for being one of the first and staunchest supporters of PhonePe,” Sameer Nigam, co-founder and CEO of PhonePe, said in a press release. His lively involvement, strategic advice and private mentoring have profoundly enriched our discussions. We will miss Binny!”

This article was originally published on : techcrunch.com
Continue Reading

Technology

The company is currently developing washing machines for humans

Published

on

By

Forget about cold baths. Washing machines for people may soon be a brand new solution.

According to at least one Japanese the oldest newspapersOsaka-based shower head maker Science has developed a cockpit-shaped device that fills with water when a bather sits on a seat in the center and measures an individual’s heart rate and other biological data using sensors to make sure the temperature is good. “It also projects images onto the inside of the transparent cover to make the person feel refreshed,” the power says.

The device, dubbed “Mirai Ningen Sentakuki” (the human washing machine of the longer term), may never go on sale. Indeed, for now the company’s plans are limited to the Osaka trade fair in April, where as much as eight people will have the option to experience a 15-minute “wash and dry” every day after first booking.

Apparently a version for home use is within the works.

This article was originally published on : techcrunch.com
Continue Reading

Technology

Zepto raises another $350 million amid retail upheaval in India

Published

on

By

Zepto, snagging $1 billion in 90 days, projects 150% annual growth

Zepto has secured $350 million in latest financing, its third round of financing in six months, because the Indian high-speed trading startup strengthens its position against competitors ahead of a planned public offering next yr.

Indian family offices, high-net-worth individuals and asset manager Motilal Oswal invested in the round, maintaining Zepto’s $5 billion valuation. Motilal co-founder Raamdeo Agrawal, family offices Mankind Pharma, RP-Sanjiv Goenka, Cello, Haldiram’s, Sekhsaria and Kalyan, in addition to stars Amitabh Bachchan and Sachin Tendulkar are amongst those backing the brand new enterprise, which is India’s largest fully national primary round.

The funding push comes as Zepto rushes so as to add Indian investors to its capitalization table, with foreign ownership now exceeding two-thirds. TechCrunch first reported on the brand new round’s deliberations last month. The Mumbai-based startup has raised over $1.35 billion since June.

Fast commerce sales – delivering groceries and other items to customers’ doors in 10 minutes – will exceed $6 billion this yr in India. Morgan Stanley predicts that this market shall be value $42 billion by 2030, accounting for 18.4% of total e-commerce and a pair of.5% of retail sales. These strong growth prospects have forced established players including Flipkart, Myntra and Nykaa to cut back delivery times as they lose touch with specialized delivery apps.

While high-speed commerce has not taken off in many of the world, the model seems to work particularly well in India, where unorganized retail stores are ever-present.

High-speed trading platforms are creating “parallel trading for consumers seeking convenience” in India, Morgan Stanley wrote in a note this month.

Zepto and its rivals – Zomato-owned Blinkit, Swiggy-owned Instamart and Tata-owned BigBasket – currently operate on lower margins than traditional retail, and Morgan Stanley expects market leaders to realize contribution margins of 7-8% and adjusted EBITDA margins to greater than 5% by 2030. (Zepto currently spends about 35 million dollars monthly).

An investor presentation reviewed by TechCrunch shows that Zepto, which handles greater than 7 million total orders every day in greater than 17 cities, is heading in the right direction to realize annual sales of $2 billion. It anticipates 150% growth over the following 12 months, CEO Aadit Palicha told investors in August. The startup plans to go public in India next yr.

However, the rapid growth of high-speed trading has had a devastating impact on the mom-and-pop stores that dot hundreds of Indian cities, towns and villages.

According to the All India Federation of Consumer Products Distributors, about 200,000 local stores closed last yr, with 90,000 in major cities where high-speed trading is more prevalent.

The federation has warned that without regulatory intervention, more local shops shall be vulnerable to closure as fast trading platforms prioritize growth over sustainable practices.

Zepto said it has created job opportunities for tons of of hundreds of gig employees. “From day one, our vision has been to play a small role in nation building, create millions of jobs and offer better services to Indian consumers,” Palicha said in an announcement.

Regulatory challenges arise. Unless an e-commerce company is a majority shareholder of an Indian company or person, current regulations prevent it from operating on a listing model. Fast trading corporations don’t currently follow these rules.

This article was originally published on : techcrunch.com
Continue Reading
Advertisement

OUR NEWSLETTER

Subscribe Us To Receive Our Latest News Directly In Your Inbox!

We don’t spam! Read our privacy policy for more info.

Trending