“I’m totally screwed.” WD My Book Live users wake up to find their data deleted
Western Digital, maker of the popular My Disk external hard drives, recommends that customers unplug My Disk Live storage devices from the internet until further notice while company engineers investigate the unexplained trade-offs that completely wiped out the data. data from devices around the world.
Mass disk erase incidents were exposed in this thread on the Western Digital support forum. So far, there is no report of deleted data later restored.
All my data is gone
“I have a WD mybook live connected to my local network and have performed well for years,” wrote the person who started the thread. “I just found out that somehow all the data is gone there today, while the directories seem to be there but empty. Previously the 2T volume was almost full, but now it is showing full capacity.
Other My Book Live users quickly joined the conversation to report that they too had been through the exact same thing. “All my data is also gone,” one user quickly replied. “I’m totally screwed without this data … years.”
Several users reported that the data loss coincided with a factory reset performed on their devices. One person published a newspaper that showed unexplained behavior that occurred on Wednesday:
June 23 15:14:05 MyBookLive factoryRestore.sh: start of script:
June 23 15:14:05 MyBookLive shutdown: shutdown for system restart
Jun 23 16:02:26 MyBookLive S15mountDataVolume.sh: start script: start
Jun 23 4:02:29 PM MyBookLive _: pkg: wd-nas
23 Jun 16:02:30 MyBookLive _: pkg: networking-general
23 Jun 16:02:30 MyBookLive _: pkg: apache-php-webdav
June 23 16:02:31 MyBookLive _: package: date-time
Jun 23 16:02:31 MyBookLive _: pkg: alerts
Jun 23 16:02:31 MyBookLive recorder: hostname = MyBookLive
Jun 23 4:02:32 PM MyBookLive _: pkg: admin-rest-api
“I think that’s the reason it’s happening,” the person wrote. “No one was even at home using this reader at the time.”
The My Book is a popular storage device for consumers and businesses. It plugs into computers, usually via USB. The affected model here, known as My Book Live, uses an Ethernet cable to connect to a local area network. From there, users can remotely access their files and make configuration changes through Western Digital’s cloud infrastructure. Western Digital discontinued My Book Live in 2015. The support forum thread was first reported by Bleeping Computer.
Log out now
On its website, Western Digital advised customers to disconnect their My Book Live devices to avoid further attacks while the company investigates the mass erase.
In an email, Western Digital officials wrote:
The incident is being actively investigated by Western Digital. We have no indication of any violation or compromise of Western Digital’s cloud services or systems.
We have determined that some My Book Live devices have been compromised by a malicious actor. In some cases, this compromise has led to a factory reset which appears to erase all data on the device. The My Book Live device received its last firmware update in 2015.
At this time, we recommend that customers disconnect their My Book Live devices from the Internet to protect their data on the device.
We have issued the following statement to our customers and will provide updates to this thread when available: https://community.wd.com/t/action-required-on-my-book-live-and- my-book -live-duo / 268147
The limited amount of information available at the moment makes it difficult to determine the cause of this massive data destruction. Reading between the lines, Western Digital’s statement seems to say that customer accounts have been individually compromised. The advice to unplug devices while the investigation continues is warranted and users should follow it as soon as possible.
In the meantime, My Book Live users are trying to deal with the difficulties caused by the incident.
“It’s very scary and devastating that someone can do a factory restore to my drive without any permission granted by the end user,” one user wrote. “I need a remedy for this problem immediately because it is already costing me dearly.”
Message updated to highlight that only My Book Live devices are reported as affected.
Please feel free to contact us for more detail about us, visiting our Contact page.