TLDR: My MyCloud Home factory reset itself and Western Digital doesn’t know how it was done. All data has been deleted.
About a month and a half ago I discovered my MyCloud Home had lost all the data on it. I checked it out and found that it had been factory reset from the logs. Knowing I didn’t factory reset the device and that I’m the only one with access to the account I logged a ticket with WD.
They said the only way to factory reset the device would be is to have an internet connection and click on the factory reset button in the account or through the physical button on the back of the device itself.
As I know when the factory reset took place from the logs I know I was actually away for the weekend when this happened and no one was in my house. Fortunately for me I actually have a security camera in the room and can see the device. I checked the footage the weekend this happened and no one was in the room at all over the weekend.
This tells me either someone hacked my account or something else untoward has happened.
WD Support said that they have no way to know either:
- How the device was factory reset, either by button or online account
- They don’t have any logs that would suggest the account was being used or that it was me or someone else.
I do have a very secure 20 character alphanumeric password generated by a password manager so it would be unlikely that someone would have brute forced the password.
Also on that note I am surprised WD don’t offer two-factor/multifactor authentication when dealing with customers data!
I can’t confirm this but I suspect this is to do with some sort of software update gone wrong.
Essentially what I am getting at here is, DO NOT TRUST THIS DEVICE! If you have important data on this device make sure it is backed up elsewhere. I was fortunate enough not to fully trust this device anyway and had a backup of my data elsewhere.
