Advertisement
Dell, a major player in computer manufacturing, is currently investigating reports of a security breach that potentially exposed sensitive employee data. A threat actor, using the alias ‘grep,’ recently posted on the dark web forum BreachForums, claiming to have a large database containing information on over 10,800 Dell employees and partners. The stolen data reportedly includes employee IDs, full names, internal IDs, and employment status.
The breach allegedly occurred in September 2024, and if the claims are valid, it could pose a serious risk to Dell. The stolen information could be exploited for identity theft and phishing scams. Cybercriminals could impersonate Dell employees to trick other staff members into revealing confidential information, granting access to secure areas of Dell’s infrastructure, or even deploying ransomware.
What makes the situation more concerning is that the database is being sold for just 1 BreachForums credit, roughly $0.30, with a free sample available. Dell has responded, stating they are aware of the claims and their security team is actively investigating.
Adding to the chaos, the same hacker, ‘grep,’ previously claimed responsibility for breaching French tech firm Capgemini earlier this month. They allegedly stole 20 GB of sensitive data, including employee details, source code, API keys, and cloud infrastructure information. However, a separate claim involving T-Mobile US was debunked, with the company asserting that the data did not belong to them but possibly to a T-Mobile entity outside the U.S.