Dell EMC
Dell's enterprise storage and data protection division; its storage infrastructure was visible in alleged Trellix internal screenshots posted by RansomHouse in May 2026.
Last refreshed: 20 May 2026 · Appears in 1 active topic
What does RansomHouse's access to Trellix's storage console reveal about enterprise extortion tactics?
Timeline for Dell EMC
RansomHouse posts Trellix internal screenshots as extortion leverage
Cybersecurity: Threats and DefencesWhat is Dell EMC and is it part of Dell Technologies?
Was Dell EMC hacked in the Trellix breach?
Background
Dell EMC is the enterprise storage, server, and data-management product division of Dell Technologies, formed from Dell's $67 billion acquisition of EMC Corporation in 2016, then the largest technology acquisition in history. The combined unit produces storage arrays (PowerStore, PowerMax, Unity XT), server infrastructure, data protection appliances, and converged infrastructure products sold to enterprises and governments globally. Dell Technologies reported revenues of approximately $88 billion in its fiscal year 2025, with the Infrastructure Solutions Group (which includes Dell EMC storage) accounting for the majority of that figure.
Dell EMC storage infrastructure appeared by name in the May 2026 Trellix breach, when RansomHouse posted alleged internal screenshots from inside Trellix's systems reportedly showing access to Trellix's Dell EMC storage environment alongside its VMware estate and Rubrik backup infrastructure. The Dell EMC mention is incidental to the Trellix breach narrative: Dell EMC is a ubiquitous enterprise storage vendor, and its presence in a large enterprise's data-centre is unremarkable. The significance is the claim that RansomHouse had sufficient system access to identify and screenshot the storage management layer.
Dell EMC itself is not a named victim and has no disclosed involvement in the Trellix incident beyond appearing in screenshots that Trellix has not authenticated. The screenshots are RansomHouse's extortion artefact, not a confirmed data-exfiltration record.