Security News > 2023 > March > Ferrari data breach: Client data exposed

Italian luxury sports car maker Ferrari has suffered a data breach and has confirmed on Monday that it "Was recently contacted by a threat actor with a ransom demand related to certain client contact details," but that it won't be paying up.
"We can also confirm the breach has had no impact on the operational functions of our company," claims the client communication sent to potentially affected customers and signed by Ferrari CEO Benedetto Vigna.
Unnamed attackers have managed to access a limited number of systems in the company's IT environment, and certain client data - including names, addresses, email addresses and telephone numbers - was exposed, Vigna shared.
Apparently, Ferrari became aware of the breach only after receiving the ransom demand.
It is unknown whether this "Cyber incident" is related to a previous alleged attack by the RansomEXX ransomware gang, which resulted in 7GB of data - including internal Ferrari documents, datasheets, repair manuals, and more - being leaked online.
The exposed personal and direct contact information could be used by these or other attackers to mount spear-phishing attacks, so Ferrari customers should be extra careful when reviewing emails and answering the phone from now on.
News URL
https://www.helpnetsecurity.com/2023/03/21/ferrari-data-breach-client-data-exposed/
Related news
- Wolf Haldenstein law firm says 3.5 million impacted by data breach (source)
- Otelier data breach exposes info, hotel reservations of millions (source)
- PayPal to pay $2 million settlement over 2022 data breach (source)
- UnitedHealth now says 190 million impacted by 2024 data breach (source)
- PowerSchool starts notifying victims of massive data breach (source)
- US healthcare provider data breach impacts 1 million patients (source)
- US healthcare provider data breach impacts 1 million patients (source)
- Globe Life data breach may impact an additional 850,000 clients (source)
- GrubHub data breach impacts customers, drivers, and merchants (source)
- HPE notifies employees of data breach after Russian Office 365 hack (source)