Threat actor scraped Dell support tickets, including customer phone numbers

TechCrunch reports that a threat actor using the handle "Menelik" scraped customer data from multiple Dell portals: an earlier extraction of 49 million customers' physical addresses and a later scrape of about 30,000 U.S. customers containing names, emails, phone numbers, service reports, diagnostic logs and customer-uploaded photos with GPS metadata. Menelik claims to have exploited portal flaws (including brute-forcing service tags after registering as a partner), provided samples to TechCrunch, attempted to sell the data, and said he is monitoring Dell's response while the company investigates.