Nissan Data Breach - Third-Party Vendor Compromised, Everest Ransomware Group Claims Responsibility
Nissan's data was stolen from a company that helps them, not directly from Nissan itself. A group called Everest says they took a lot of information and might share it soon. Nissan is checking to make sure their own systems are safe.
Nissan confirms a data breach linked to a third-party vendor, with the Everest ransomware group claiming to have stolen 910 GB of sensitive data. The automaker insists its systems remain secure.
What Happened
Nissan has confirmed that a cyberattack against a third-party vendor has resulted in the compromise of sensitive data. The Everest ransomware group has claimed responsibility for the breach, asserting that it stole 910 gigabytes of data from the vendor's file transfer system used by Nissan and Infiniti dealerships across North America. The attack reportedly took place in January, and the group has threatened to release the stolen data imminently.
Who's Affected
The breach could potentially impact customers, dealerships, and loan information associated with Nissan and Infiniti. While Nissan has stated that its own systems were not compromised, the implications for affected third-party vendors and their clients remain significant.
What Data Was Exposed
The Everest group claims that the stolen data includes sensitive information related to customers, dealerships, and financial transactions involving car loans. This incident follows a troubling trend for Nissan, which has faced multiple security incidents in recent years, including a breach in 2024 that exposed data from nearly 100,000 customers and employees in Australia and New Zealand.
What You Should Do
Nissan has urged customers to remain vigilant and monitor their accounts for any suspicious activity. The company is working closely with the affected vendor to investigate the breach and mitigate any potential risks. Customers are advised to change passwords and enable two-factor authentication where possible.
Investigation Status
The investigation into the incident is ongoing, and Nissan has reiterated that it has found no evidence that its systems were compromised or that customer information was accessed or put at risk. The automaker is collaborating with the vendor as it completes its investigation into the breach.
Historical Context
This latest incident adds to a series of cyberattacks against Nissan, highlighting vulnerabilities in supply chain security. The company has reported previous breaches in 2022 and 2023, affecting thousands of individuals, raising concerns about the security protocols in place for third-party vendors.