Product Security

We provide products and services that store and transfer data with the understanding that protecting data is critical to our users. We strive to innovate and enhance our products to provide increased privacy and security. Transparency of our privacy and security practices is essential to our commitment to users, and to that end, we have created this web page to provide timely information.

Bulletins

Report a Security Issue

To report a security issue you believe you have found in a Western Digital product or service, please email the details of your findings to PSIRT@wdc.com. Messages sent to any other email addresses may result in a delayed response.
When possible, please include the following:

  • The specific product(s) or service(s) affected, including any relevant version numbers;
  • Details about the impact of the issue;
  • Any information that can help reproduce or diagnose the issue, including a Proof of Concept (PoC) if available; and
  • Whether you believe the vulnerability is already publicly disclosed or known to third parties.


Please use our PGP/GPG key to encrypt the information before sending it.

Vulnerability Disclosure Program

Western Digital follows a coordinated vulnerability disclosure process. For more information on the scope of our vulnerability disclosure program and what you can expect when working with Western Digital, see our Vulnerability Disclosure Policy.

Western Digital Vulnerability Disclosure Policy