Dell changes every user's password after cyber attack that could have leaked data
Customers will receive emails informing them of the change
Your support helps us to tell the story
From reproductive rights to climate change to Big Tech, The Independent is on the ground when the story is developing. Whether it's investigating the financials of Elon Musk's pro-Trump PAC or producing our latest documentary, 'The A Word', which shines a light on the American women fighting for reproductive rights, we know how important it is to parse out the facts from the messaging.
At such a critical moment in US history, we need reporters on the ground. Your donation allows us to keep sending journalists to speak to both sides of the story.
The Independent is trusted by Americans across the entire political spectrum. And unlike many other quality news outlets, we choose not to lock Americans out of our reporting and analysis with paywalls. We believe quality journalism should be available to everyone, paid for by those who can afford it.
Your support makes all the difference.Dell has changed every single one of its user passwords on its store, after a major cyber attack.
The company said that it had found and stopped hackers who were trying to break into its systems. But it would change the passwords to ensure that all data was safe, it said.
The company has been criticised for being slow in informing users of the change and the potential breach. The reset happened on 14 November, five days after the hackers were discovered, and users were only informed this week.
Customers were not told about the hack or the reset passwords until it chose to disclose the entire hack.
Dell said in a statement that on 9 November the company detected and stopped hackers who had breached its network and were attempting to steal customer data. Investigators found no evidence that the hackers succeeded, but have not ruled out the possibility that they did steal some data, the company said.
They only sought customer names, email addresses and scrambled passwords, Dell said.
The breach occurred as companies come under increasing scrutiny from regulators worldwide to provide quick and accurate disclosure of customer data theft. The European Union implemented strict new privacy regulations in May that punish violators with fines of up to 20 million euros ($23 million), or 4 percent of global revenue, whichever is higher.
Dell determined that there were no regulatory or legal requirements that it disclose the incident, but decided to come forward "with customer trust in mind," according to the source.
Dell declined to say how many accounts were affected, but did say that payment information and Social Security numbers were not targeted.
Dell said it reported the matter to law enforcement. Representatives with the Federal Bureau of Investigation could not immediately be reached for comment.
Additional reporting by Reuters
Join our commenting forum
Join thought-provoking conversations, follow other Independent readers and see their replies
Comments