Hacker News new | past | comments | ask | show | jobs | submit login
Dell API abused to steal 49M customer records in data breach (bleepingcomputer.com)
9 points by Wasserpuncher 8 months ago | hide | past | favorite | 2 comments



> Menelik says he could access the portal by registering multiple accounts under fake company names and had access within two days without verification.

> "It is very easy to register as a Partner. You just fill an application form," Menelik told BleepingComputer.

It sounds like the customer data was not stolen but freely given away to anyone who asked.


The “100+ trusted partners” racket.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: