Western Digital NAS Drive users compromised

Western Digital believes it is under external attack and customer accounts have been compromised as owners of the MY Book Live NAS have found their servers empty or completely wiped and it doesn’t seem as though anybody has managed to get their data back at this stage.

This is obviously a major headache for both the company and its users and as it is a live attack, Western Digital has taken the extraordinary step of advising users to disconnect their NAS from the internet in order to protect their data.

“Western Digital has determined that some My Book Live devices are being compromised by malicious software. In some cases, this compromise has led to a factory reset that appears to erase all data on the device. The My Book Live device received its final firmware update in 2015. We understand that our customers’ data is very important. At this time, we recommend you disconnect your My Book Live from the Internet to protect your data on the device. We are actively investigating and we will provide updates to this thread when they are available.”

We are moving into a zone now where we need to backup our backups and seemingly nothing can be trusted.

Of course, having to disconnect your NAS from the internet kinda removes its purpose as it is a NETWORK ATTACHED STORAGE meaning it’s effectively a useless box.

More as we get it.