MSI msi.com MSI data breach: what happened and what to do
In July 2024 MSI left customer warranty (RMA) records publicly accessible. Have I Been Pwned lists 249,990 accounts, with email addresses, names, phone numbers, physical addresses and warranty claims exposed.
View all 13,115 breaches- Breach date
- 7 Jul 2024
- Affected
- 249,990
- Data exposed
- Email addresses, Names, Phone numbers, Physical addresses, Warranty claims
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
MSI makes PCs, laptops and components. In July 2024 it exposed customer records tied to warranty (RMA) claims on a server anyone could reach. Have I Been Pwned (HIBP) dates the exposure to 7 July 2024 and added it on 17 January 2025.
What happened
CyberInsider reported that the exposed server was found after a tip to a YouTube channel, and that it held warranty data for more records than HIBP loaded. Heise reported on the 250,000 customers in HIBP. When contacted, MSI told HIBP that "there is no evidence the information was ever accessed" and that the incident did not trigger state breach notification obligations because no Social Security or driver's license numbers were involved.
What was exposed
HIBP lists 249,990 accounts with email addresses, names, phone numbers, physical addresses and warranty claims.
Warranty claims say which product you own and what went wrong with it. A scammer who knows your name, address, phone number and your laptop model can pose as MSI support, offer a refund or ask you to pay a "return fee". The exposed portal could be used to resend RMA details, which is the kind of access that makes such scams easier.
What to do
Treat any message about an MSI repair, refund or return you didn't start as suspect, and contact MSI through its official site. No passwords were in the dataset.
What to do if you were in it
- 1
Verify any MSI contact yourself
If someone calls or emails about a repair, refund or return, don't use the contact details in the message. Open MSI's official support site and check there.
- 2
Watch for package and delivery scams
A leaked name, phone number and home address make convincing fake delivery and order messages. Check order status in the retailer's own app or site, not through a link in a message.
- 3
Expect phishing that mentions the breach
Treat unexpected emails, texts and calls as suspect, especially ones that name the company or offer help with the breach. Don't click links in them; go to the company's site yourself.
- 4
Check which other breaches include you
Run a free Serus scan to see whether your email or phone number appears in this and other breaches. Serus monitors breach databases and the dark web and alerts you when your details show up in a new leak.
Frequently asked
Was I affected by the MSI breach?
Look up your email on Have I Been Pwned, or run a free Serus scan. HIBP lists 249,990 accounts.
What was exposed?
Email addresses, names, phone numbers, physical addresses and warranty claims.
Was my password exposed?
HIBP lists no passwords for this exposure.
What did MSI say?
MSI said there was no evidence the information was ever accessed.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
