Western Digital, maker of the favored My Disk exterior laborious drives, is recommending prospects unplug My E book Stay storage units from the Web till additional discover whereas firm engineers examine unexplained compromises which have fully wiped knowledge from units all over the world.
The mass incidents of disk wiping got here to mild on this thread on Western Digital’s help discussion board. To this point, there aren’t any stories of deleted knowledge later being restored.
All my knowledge is gone
“I’ve a WD mybook reside related to my house LAN and labored nice for years,” the individual beginning the thread wrote. “I’ve simply discovered that someway all the info on it’s gone as we speak, whereas the directories appears there however empty. Beforehand the 2T quantity was virtually full however now it reveals full capability.”
Different My E book Stay customers rapidly joined the dialog to report they, too, had skilled exactly the identical factor. “All my knowledge is gone too,” one consumer quickly responded. “I’m completely screwed with out that knowledge… years of it.”
A number of customers reported that the info loss coincided with a manufacturing facility reset that was carried out on their units. One individual posted a log that confirmed unexplained conduct occurring on Wednesday:
Jun 23 15:14:05 MyBookLive factoryRestore.sh: start script:
Jun 23 15:14:05 MyBookLive shutdown: shutting down for system reboot
Jun 23 16:02:26 MyBookLive S15mountDataVolume.sh: start script: begin
Jun 23 16:02:29 MyBookLive _: pkg: wd-nas
Jun 23 16:02:30 MyBookLive _: pkg: networking-general
Jun 23 16:02:30 MyBookLive _: pkg: apache-php-webdav
Jun 23 16:02:31 MyBookLive _: pkg: date-time
Jun 23 16:02:31 MyBookLive _: pkg: alerts
Jun 23 16:02:31 MyBookLive logger: hostname=MyBookLive
Jun 23 16:02:32 MyBookLive _: pkg: admin-rest-api
“I consider that is the wrongdoer of why this occurs,” the individual wrote. “Nobody was even house to make use of this drive presently.”
The My E book is a well-liked storage machine for shoppers and companies. It plugs into computer systems, sometimes via USB. The affected mannequin right here, often known as My E book Stay, makes use of an ethernet cable to connect with a neighborhood community. From there, customers can remotely entry their recordsdata and make configuration modifications via Western Digital cloud infrastructure. Western Digital stopped supporting the My E book Stay in 2015. The help discussion board thread was first reported by Bleeping Pc.
On its web site, Western Digital suggested prospects to disconnect their My E book Stay units to stop additional assaults whereas the corporate investigates the mass wiping.
In an e mail, Western Digital officers wrote:
The incident is beneath energetic investigation from Western Digital. We wouldn’t have any indications of a breach or compromise of Western Digital cloud providers or programs.
We now have decided that some My E book Stay units have been compromised by a risk actor. In some circumstances, this compromise has led to a manufacturing facility reset that seems to erase all knowledge on the machine. The My E book Stay machine obtained its last firmware replace in 2015.
Right now, we’re recommending that prospects disconnect their My E book Stay units from the Web to guard their knowledge on the machine.
We now have issued the next assertion to our prospects and can present updates to this thread when they’re out there: https://group.wd.com/t/action-required-on-my-book-live-and-my-book-live-duo/268147
The restricted quantity of knowledge out there in the mean time makes it laborious to find out what’s inflicting this mass knowledge destruction. Studying between the strains, Western Digital’s assertion appears to be saying buyer accounts had been individually compromised. The recommendation to unplug units whereas the investigation continues is warranted, and customers ought to observe it as quickly as attainable.
Within the meantime, My E book Stay customers try to handle the hardship introduced on by the incident.
“It is extremely scary and devastating that somebody can do manufacturing facility restore on my drive with none permission granted from the top consumer,” one consumer wrote. “I would like a treatment to this situation instantly as that is already incurring an ideal value to me.”
Submit up to date to emphasise that solely My E book Stay units are reported to be affected.