Support

Product Security

We provide products and services that store and transfer data with the understanding that protecting data is critical to our users. We strive to innovate and enhance our products to provide increased privacy and security. Transparency of our privacy and security practices is essential to our commitment to users, and to that end, we have created this web page to provide timely information.

Bulletins

WDC-24002 SanDisk PrivateAccess Desktop App Version 6.4.10
WDC-24001 Western Digital My Cloud OS5, My Cloud Home & Duo and SanDisk ibi Firmware Update
WDC-23013 SanDisk Security Installer for Windows 1.0.0.25
WDC-23012 My Cloud OS 5 Firmware 5.27.157
WDC-23011 Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Firmware Version 9.5.0-186
WDC-23010 Western Digital My Cloud Firmware Version 5.26.300
WDC-23009 Western Digital My Cloud OS 5, My Cloud Home and SanDisk ibi Firmware Update
WDC-23008 Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Firmware Version 9.4.1-101
WDC-23006 My Cloud Firmware Version 5.26.202
WDC-23005 SanDisk PrivateAccess Software Update
WDC-23004 Western Digital My Cloud OS 5, My Cloud Home, SanDisk ibi and WD Cloud Mobile and Web App Update
WDC-23003 Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Firmware Version 9.4.0-191
WDC-23002 My Cloud Firmware Version 5.26.119
WDC-23001 Host Boot ROM Code Vulnerability in Systems Implementing UFS Boot Feature
Report a Security Issue

To report a security issue you believe you have found in a Western Digital product or service, please email the details of your findings to PSIRT@wdc.com. Messages sent to any other email addresses may result in a delayed response.
When possible, please include the following:

  • The specific product(s) or service(s) affected, including any relevant version numbers;
  • Details about the impact of the issue;
  • Any information that can help reproduce or diagnose the issue, including a Proof of Concept (PoC) if available; and
  • Whether you believe the vulnerability is already publicly disclosed or known to third parties.


Please use our PGP/GPG key to encrypt the information before sending it.

Vulnerability Disclosure Program

Western Digital follows a coordinated vulnerability disclosure process. For more information on the scope of our vulnerability disclosure program and what you can expect when working with Western Digital, see our Vulnerability Disclosure Policy.

Western Digital Vulnerability Disclosure Policy

Compare