Recent Dell data breach

[treeboi2]

I just got a warning on all of my 3 Google accounts (1 for work, 2 for personal use) that my password was leaked in a recent non-google related data breach. After I bit of searching I found I got an email from Dell on 2 of the 3 emails (my work email didn't get one, however Google says my password was leaked still). Dell says nothing of password leaks in the email, I already changed my personal account passwords and contacted company IT. Email is as follows: 

An important message about your Dell information

Hello,

Dell Technologies takes the privacy and confidentiality of your information seriously. We are currently investigating an incident involving a Dell portal, which contains a database with limited types of customer information related to purchases from Dell. We believe there is not a significant risk to our customers given the type of information involved.

What data was accessed?

At this time, our investigation indicates limited types of customer information was accessed, including:

Name
Physical address
Dell hardware and order information, including service tag, item description, date of order and related warranty information

The information involved does not include financial or payment information, email address, telephone number or any highly sensitive customer information.

What is Dell doing?

Upon identifying the incident, we promptly implemented our incident response procedures, began investigating, took steps to contain the incident and notified law enforcement. We have also engaged a third-party forensics firm to investigate this incident. We will continue to monitor the situation.

What can I do?

Our investigation indicates your information was accessed during this incident, but we do not believe there is significant risk given the limited information impacted. However, you should always keep in mind these tips to help avoid tech support phone scams. If you notice any suspicious activity related to your Dell accounts or purchases, please immediately report concerns to security@dell.com.

 

 

Should I be worried\ do anything else?

 

[PcBeExpensive]

6 minutes ago, treeboi2 said:

I just got a warning on all of my 3 Google accounts (1 for work, 2 for personal use) that my password was leaked in a recent data breach. After I bit of searching I found I got an email from Dell on 2 of the 3 emails (my work email didn't get one, however Google says my password was leaked still). Dell says nothing of password leaks in the email, I already changed my personal account passwords and contacted company IT. Email is as follows: 

An important message about your Dell information

Hello,

Dell Technologies takes the privacy and confidentiality of your information seriously. We are currently investigating an incident involving a Dell portal, which contains a database with limited types of customer information related to purchases from Dell. We believe there is not a significant risk to our customers given the type of information involved.

What data was accessed?

At this time, our investigation indicates limited types of customer information was accessed, including:

Name
Physical address
Dell hardware and order information, including service tag, item description, date of order and related warranty information

The information involved does not include financial or payment information, email address, telephone number or any highly sensitive customer information.

What is Dell doing?

Upon identifying the incident, we promptly implemented our incident response procedures, began investigating, took steps to contain the incident and notified law enforcement. We have also engaged a third-party forensics firm to investigate this incident. We will continue to monitor the situation.

What can I do?

Our investigation indicates your information was accessed during this incident, but we do not believe there is significant risk given the limited information impacted. However, you should always keep in mind these tips to help avoid tech support phone scams. If you notice any suspicious activity related to your Dell accounts or purchases, please immediately report concerns to security@dell.com.

 

 

Should I be worried\ do anything else?

 

You've changed your passwords. Not sure what else you can do from here. Do whatever the company IT says to do and if you are really worried contact Dell and say Google says your passworks were leaked? I have no clue what else you can do though. You've done everything in your power, its up to Dell to fix the issue now.

[MadAnt250]

Oh snap! When did Google have a data breach?

[treeboi2]

8 hours ago, MadAnt250 said:

Oh snap! When did Google have a data breach?

https://www.bleepingcomputer.com/news/security/dell-api-abused-to-steal-49-million-customer-records-in-data-breach/

[Egon3]

The Dell data breach did not include username/password data, just sales order data. The attackers used a Dell partner account to scrape data using every possible combination of service tag characters over the course of multiple weeks.

 

I think the Dell breach and you receiving this notice may be a coincidence and you should consider all other places you may have used this password. There are multiple sites, such as haveibeenpwned.com, where you can enter your email to see what breaches it was a part of.

 

23 hours ago, MadAnt250 said:

Oh snap! When did Google have a data breach?

Google did not have a data breach in this instance, but as a courteously it can monitor other breaches for your username/password.

[treeboi2]

10 hours ago, Egon3 said:

The Dell data breach did not include username/password data, just sales order data. The attackers used a Dell partner account to scrape data using every possible combination of service tag characters over the course of multiple weeks.

 

I think the Dell breach and you receiving this notice may be a coincidence and you should consider all other places you may have used this password. There are multiple sites, such as haveibeenpwned.com, where you can enter your email to see what breaches it was a part of.

 

Google did not have a data breach in this instance, but as a courteously it can monitor other breaches for your username/password.

 

Google is a big doodoo