Data of 21,000 Nissan customers leaked via Red Hat

"Nissan Motor Co. reported on Monday that the personal data of approximately 21,000 customers had been exposed as a result of a data breach at Red Hat. This breach was discovered back in September. Red Hat is responsible for developing and hosting customer management systems for Nissan's sales companies. According to Nissan, the company was notified by Red Hat that unauthorized persons had gained access to the American software supplier's data servers. In doing so, attackers stole data. It later emerged that the leaked dataset also contained customer information from Nissan Fukuoka Sales. This is a regional sales organization in Japan."

"The data breach at Red Hat was made public in early October. It involved the theft of hundreds of gigabytes of sensitive data from approximately 28,000 private GitLab repositories. The attack was initially claimed by the Crimson Collective threat group. Later, the well-known cybercriminal group ShinyHunters published examples of the stolen data on its own extortion platform, further increasing the pressure on Red Hat."

Approximately 21,000 Nissan customers had personal data exposed after attackers accessed Red Hat data servers in a breach discovered in September. Red Hat develops and hosts customer management systems for Nissan's sales companies, and the leaked dataset included customers of Nissan Fukuoka Sales who purchased vehicles or received maintenance in Fukuoka. Leaked fields include full names, physical addresses, telephone numbers, email addresses, and additional sales and marketing data; financial information such as credit card details was not included. Nissan reported no indications of misuse, notified the Japanese data protection regulator, informed affected customers, and raised concerns about outsourced IT security.

Read at Techzine Global