Dell API abused to steal 49M customer records in data breach

> Menelik says he could access the portal by registering multiple accounts under fake company names and had access within two days without verification.

> "It is very easy to register as a Partner. You just fill an application form," Menelik told BleepingComputer.

It sounds like the customer data was not stolen but freely given away to anyone who asked.