A hacker known as “grep” has claimed responsibility for a data breach at technology giant Dell, exposing over 10,000 employee records. The breach was disclosed on September 19, 2024, through the hacker forum Breach Forums, where the stolen information was leaked. The hacker alleges that the breach occurred earlier in the month.
The leaked data includes employee names, ID numbers, active status, department numbers (DNO), and internal employee identifiers. While no passwords or sensitive personal information like addresses or Social Security numbers were exposed, the breach still poses significant cybersecurity risks. Only two email addresses from Dell’s official domain were found in the data.
The breach has raised concerns about the growing threat of phishing attacks and phone scams targeting businesses through their employees. With information like employee IDs and internal identifiers now public, cybercriminals could use these details in social engineering schemes. Recent campaigns uncovered by cybersecurity firm GuidePoint demonstrated how threat actors impersonate IT staff to deceive employees into revealing sensitive information such as VPN credentials. These tactics have affected over 130 organizations across the US.
This incident follows a previous cybersecurity issue at Dell in May 2024, when a hacker tried to sell 49 million alleged customer records on a dark web forum. That breach exposed personal details, hardware information, and order data, highlighting Dell’s ongoing struggles with data security.
