Skip to main content

It’s time to change your password again as Dell reveals attempted hack

Dell said on Wednesday, November 28, that it recently spotted an attempt by hackers to steal customer data.

The American computer giant said it detected the nefarious activity on November 9, and acted swiftly to block it. Its initial investigation shows that the hackers appeared to be after names, email addresses, and “hashed” passwords, which are hard to decipher.

Dell said it’s possible that the cybercriminals managed to get hold of the information stored on one of its servers, though so far it has found “no conclusive evidence that any was extracted.” It added that credit card data and “other sensitive customer information” was not targeted in the cyberattack.

As a precautionary measure, the Texas-based company said it was prompting customers to reset their passwords. It’s also encouraging them to change passwords for other accounts if it’s the same as the one they use at Dell.com.

In an effort to understand the full scale of the cyberattack and track down the perpetrators, Dell said it has hired a digital forensics firm to conduct an independent investigation and has also informed law enforcement.

“In this age of highly sophisticated information security threats, Dell is committed to doing all it can to protect customers’ information,” the company said in a release, adding, “Dell will continue to invest in its information technology networks and security to detect and prevent the risk of unauthorized activity.”

When asked how many customers were affected by the incident, Dell told Digital Trends: “Since this is a voluntary disclosure, and there is no conclusive evidence that customer account information was extracted, it would not be prudent to publish potential numbers when there may be none.”

Customers can keep up to date with any developments by visiting a Dell webpage dedicated to the incident.

Password tips

Dell offered a few tips for creating a new password that many people could find useful.

It suggests, for example, using at least eight characters, preferably a mix of uppercase and lowercase letters, and at least one number. If that sounds obvious, then don’t forget, plenty of people are still using some pretty ridiculous passwords online.

Dell  proposes using a so-called “reminder sentence” about your life that uses the first letter of each word to create the password. For example, “I drink 3 cups of coffee with cream and sugar every day” would make the password Id3cocwcased”.

Alternatively, you might want to consider using a password manager — LastPass is highly rated — that simplifies the process by using a master password to take care of all your different ones across multiple sites and services.

Trevor Mogg
Contributing Editor
Not so many moons ago, Trevor moved from one tea-loving island nation that drives on the left (Britain) to another (Japan)…
Homeland Security bug bounty reveals huge number of flaws
A large monitor displaying a security hacking breach warning.

The outcome of a bug bounty program for the Department of Homeland Security (DHS) has been revealed, and it’s not particularly encouraging news for a government agency synonymous with cyber security.

Participants of DHS’ first-ever bug bounty program, named "Hack DHS," confirmed that they found a worrying number of security bugs.

Read more
Destructive hacking group REvil could be back from the dead
Person typing on a computer keyboard.

There was a period in 2021 when the computing world was gripped by fear of a dizzyingly effective hacking group fittingly named REvil -- until its website was seized by the FBI and its members arrested by Russia’s security services, that is. Yet like a malevolent curse that just can’t be dispelled, it now seems the group’s websites are back online. Has the group returned to spread discord and wreak havoc once again?

In case you missed them the first time around, REvil came to global attention by hacking into various high-profile targets, pilfering secret documents, then threatening their release unless a ransom was paid. In a notable case, the group stole and published files from Apple supplier Quanta Computer, including some that spilled the beans on unreleased product designs.

Read more
Victims of latest massive LAPSUS$ hack include Facebook, DHL
facebook privacy mark zuckerberg

Hacking group LAPSUS$ has revealed its latest target: Globant, an IT and software development company whose clientele includes the likes of technology giant Facebook.

In a Telegram update where the hackers affirmed they’re “back from a vacation,” -- potentially referring to alleged members of the group getting arrested in London -- LAPSUS$ stated that they’ve acquired 70GB of data from the cyber security breach.

Read more