[ad_1]
Ireland’s top privacy regulator initiates inquiry into the recent Dell customer data breach incident, as reported by TechCrunch.
The investigation by Ireland’s Data Protection Commission (DPC) is the latest development following the reported breach, deputy commissioner Graham Doyle informed TechCrunch. The DPC is presently “assessing” the reported incident after receiving “a breach notification on this matter,” referring to the Dell case. Doyle has not offered additional comments at this stage of the investigation.
A Dell representative has acknowledged the report, stating that the company has “notified regulators and will continue to work with them as appropriate” when response was sought from Dell for comments.
Dell has already issued notifications to its customers regarding the breach, disclosing the unauthorized access and theft of personal data such as names, physical addresses, and order details. The information pertains to some Dell customers within the European Union. Despite the loss of personal details, Dell reassured its customers saying that the breach was not likely to pose a “significant risk” due to the nature of the data stolen.
TechCrunch, on Tuesday, reported an exclusive story indicating that more data had been compromised from another Dell portal, as claimed by a threat actor known as Menelik. This subsequent breach involved names, phone numbers, and email addresses of Dell customers. TechCrunch reportedly analyzes a sample of the scammed data, corroborating the actor’s claim.
Menelik alleges to have discovered vulnerabilities in two separate Dell portals, enabling the scraping of customer information.
The DPC of Ireland, especially active in recent times, has become a prominent enforcer of the EU’s General Data Protection Regulation (GDPR). Many prominent tech entities, including Dell, have their European headquarters in Ireland, thereby falling under the DPC’s jurisdiction. The GDPR enforcements by the DPC have touched upon major tech companies, illustrated by the significant fines imposed on TikTok and Meta for their respective regulatory transgressions concerning personal data management.
GDPR dictates that companies may incur fines of up to 4% of their annual global turnover if found in violation of its provisions.
Contact Us
For more information on this Dell breach or other similar incidents, contact Lorenzo Franceschi-Bicchierai through secure channels including Signal, Telegram, Keybase, and Wire or via email. TechCrunch also encourages contacts through SecureDrop for sensitive information.
[ad_2]
FAQ Section
Q: What is the nature of the Dell customer data breaches?
A: The breaches involved loss of customer names, physical addresses, Dell order information, and, in a second breach, phone numbers and email addresses.
Q: What authority is investigating the Dell data breach?
A: Ireland’s Data Protection Commission (DPC) is investigating the incident.
Q: Has Dell communicated with its customers regarding the breach?
A: Yes, Dell sent emails to customers informing them of the breach.
Q: Are customers at significant risk following the data breach?
A: According to Dell, there is not a significant risk to customers given the type of information involved.
Q: How can more information about the breach be obtained or provided?
A: Individuals with more information can contact Lorenzo Franceschi-Bicchierai through various secure methods, or approach TechCrunch via SecureDrop.
Conclusion
In light of the recent data breaches affecting Dell customers in Europe, the Ireland Data Protection Commission has undertaken an assessment to determine the extent and impact of the incident. Meanwhile, Dell has reached out to potentially affected customers, emphasizing that the risk involved is relatively low due to the nature of data exposed. The situation spotlights the ongoing cybersecurity challenges faced by global companies, the importance of data protection, and the crucial role of regulatory bodies like the DPC in safeguarding user privacy in accordance with GDPR guidelines.
