My Book Live NAS drive owners worldwide have been reporting a serious problem. Their drives have all been factory reset and their files have been deleted. The Western Digital made NAS drives can connect to the internet and give owners remote access to their files using the My Book Live app.
My Book Live and My Book Live DUO owners have now come forward saying that their files are gone and they can no longer login into the drives using a browser or the app.
As reported on by Bleeping Computer, multiple sources have confirmed to have received a remote factory reset command on their drives that wiped the data. At this Western Digital has told customers who own one of the NAS drives to disconnect it from the internet.
In a statement shared with the publication, Western Digital has confirmed that the drives were targeted by exploiting a remote code execution vulnerability.
"Western Digital has determined that some My Book Live and My Book Live Duo devices are being compromised through exploitation of a remote command execution vulnerability. In some cases, the attackers have triggered a factory reset that appears to erase all data on the device," read the statement issued to Bleeping Computer.