For their safety, Western Digital advises My Book Live owners to disconnect the device from the network (updated)

Western Digital is concerned about what has been happening to its devices in the last few days WD My Book Live and advises all its users with a NAS to disconnect it from the network until further notice. Some devices of this type have in fact been compromised by malicious software which has deleted all data.

The WD My Book Live is a network-connected storage device with a book-style design that can also stand upright on a desk. The unit can be connected to computers via USB and connects to a network via ethernet , while the companion app allows users to access their remotely stored files through Western Digital's cloud servers.

Owners of My Book Live and Live Duo devices on Thursday started reporting on Western Digital's support forums that all of their files had been mysteriously deleted and could no longer access the device via the official app or from a browser. Following further reports, a remote command emerged in the logs of the shared devices which initiated a factory reset on the affected devices starting at 3 o'clock: About 00 pm on Thursdays and continuing throughout the night.

I have a live WD My Book connected to my home LAN that has worked fine for years. I just found that somehow all the data on it is gone today, while the directories seem there but empty. Previously the 2T volume was almost full, but now it shows full capacity.


Western Digital reacted to the news with a release advising customers to disconnect their My Book Live devices from the network while the company investigates the attacks. . The company believes that none of its servers have been compromised .

Western Digital has determined that some My Book Live devices have been compromised by malicious software. In some cases, this compromise has led to a factory reset which appears to erase all data on the device. The My Book Live device received its latest firmware update in 2015. We understand our customer data is very important. At this time, we recommend that you disconnect your My Book Live from the Internet to protect your data on the device. We are actively investigating and will provide updates to this thread when they become available.


Update 06/30/2021

With an official press release released on the support pages of its official website, the manufacturer Western Digital has admitted that the My Book Live and My Book Live Duo connected to the Internet are under attack through the exploitation of multiple vulnerabilities present in the device same. The same company recommends that you immediately disconnect your My Book Live and My Book Live Duo from the Internet to protect your data from ongoing attacks. My Book Live users will be offered a trade-in program to upgrade to a supported My Cloud device, while for those who have already experienced data loss due to these attacks, Western Digital will provide data recovery services starting in July. For more details, please consult the dedicated page on the Western Digital website.