Dell investigating data breach claims after hacker leaks employee information

Dell has launched an investigation into claims of a potential data breach after a hacker leaked sensitive employee information online. The allegations were made by a threat actor named "grep," who claims to have accessed and exposed data related to over 10,000 Dell employees and partners.

The hacker posted the details on a hacking forum, describing the breach as "minor" and stating it occurred in September 2024. According to the post, the stolen data includes unique identifiers, employee names, employment status, and internal identification strings. While only a small portion of the data was shared for free, the full database can reportedly be accessed for 1 BreachForums credit, which is worth approximately $0.30.

In response to inquiries about the breach, Dell confirmed it is actively investigating the situation. "We are aware of the claims and our security team is currently investigating," the company told BleepingComputer.

This incident follows a series of cyberattacks associated with the same threat actor. Earlier in September 2024, "grep" claimed responsibility for a breach of French IT services giant Capgemini, leaking 20 GB of sensitive data, including source code, credentials, and T-Mobile virtual machine logs.

Dell has faced security challenges before. Earlier this year, the company suffered another breach when an API vulnerability was exploited, leading to the theft of 49 million customer records. The recent leak, if confirmed, would add to Dell's cybersecurity concerns, further emphasizing the importance of robust defenses against increasingly sophisticated cyber threats.

Dell has yet to confirm the extent of the breach, and its investigation remains ongoing. The company has not provided additional details on whether customer data was affected or the potential impact on its operations.

As the investigation unfolds, Dell's response to these allegations will be closely watched, particularly given the increasing frequency of high-profile cyberattacks targeting major tech companies.