Hacked? - My Cloud Home and My Cloud OS 5 Services are DOWN

[fzabkar]

https://status.mycloud.com/os4

Service Outage
03 Apr 2023
OUTAGE
We are currently experiencing a service interruption that is preventing customers from accessing the My Cloud, My Cloud Home, My Cloud Home Duo, My Cloud OS 5, SanDisk ibi, SanDisk Ixpand Wireless Charger service. Our team is working urgently to resolve the issue and restore access as soon as possible. We apologize for any inconvenience this may cause and appreciate your patience.

Service Outage
02 Apr 2023
OUTAGE
Western Digital is currently experiencing a service outage impacting the following products: My Cloud, My Cloud Home, My Cloud Home Duo, My Cloud OS5, SanDisk ibi, SanDisk Ixpand Wireless Charger.

We are working to restore service. We apologize for any inconvenience. Next update will be posted on Monday, April 3.

[northwind]

This has started on late March and is ongoing.
https://www.bleepingcomputer.com/news/s ... vice-down/

Some of their online services are down too
http://support.wdc.com/warranty/warrant ... px?lang=en

[fzabkar]

What I don't understand is how a compromised remote server prevents a user from accessing the data in the storage device in his own home. :-?

[fzabkar]

I don't get it. Doesn't Western Digital have backups? It's not as if they can't afford the storage.

[LarrySabo]

[lcoughey]

What I don't understand is how a compromised remote server prevents a user from accessing the data in the storage device in his own home.

I believe it only prevents remote access through their servers. I'm sure users will have local access to their files.

[fzabkar]

What I don't understand is how a compromised remote server prevents a user from accessing the data in the storage device in his own home. :-?

I believe it only prevents remote access through their servers. I'm sure users will have local access to their files.

How do you explain this?

https://www.reddit.com/r/datarecovery/comments/12bwp3u/mycloud_help_local_password_stored_anywhere/

[lcoughey]

I was thinking that most would have it accessible as a share on their local LAN. But, I'm not familiar with how WD clouds work specifically...I usually only get them when they are broken.

[fzabkar]

The hackers claim that they have WD's firmware, and that WD filed a form with the SEC in which they "misrepresented several details about our intrusion, purposefully".

https://thecyberexpress.com/western-digital-ransomware-attack-hackers/

https://pbs.twimg.com/media/Ft9dmSxWYAIsh-n?format=png

[Setlec]

It would be fun to see if they release all firmware source code, that would ease our work to do data recovery.