Menelik gained access to Dell's database by registering multiple partner accounts without verification, then brute-forced customer service tags for 3 weeks undetected.
Despite over 50 million requests for sensitive data, Dell remained unaware for weeks until notified by the hacker, taking almost another week to patch the vulnerability.
The hacker demonstrated the legitimacy of obtained data by cross-referencing it with customers who received breach notifications, highlighting the severity of the breach.
Collection
[
|
...
]