Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

18k Nissan Customers Affected by Data Breach at Third-Party Software Developer

Nissan North America told roughly 18,000 customers that their personal information was exposed in a data breach via a third-party provider.

Nissan North America is informing roughly 18,000 customers that their personal information was exposed in a data breach at a third-party services provider.

The breach occurred after data provided by Nissan to the services provider was inadvertently exposed on the internet, the company notes in a notification letter sent to the impacted customers.

“The impacted third-party service provider provides software development services to Nissan. Nissan provided certain information to this service provider for processing during the testing of the software,” the car maker says.

According to Nissan, the services provider temporarily stored Nissan-provided data in a cloud-based public repository.

The company was informed of the incident in June 2022. In September, its investigation into the data breach determined that some personal information belonging to Nissan customers was accessed and exfiltrated from the repository.

The compromised information, Nissan says, includes names, birth dates, and NMAC account numbers. The breach did not include Social Security numbers and credit card information.

“Upon learning of this issue, we immediately ensured that the third-party provider contained the threat by disabling all unauthorized access to the data, and we commenced a prompt and thorough investigation,” Nissan says.

The company also notes that it has no evidence that the exposed data has been misused. However, it’s not uncommon for stolen personal information to be shared on hacker forums and to be later used in phishing and other types of cyberattacks.

While the notification letter does not say how many customers were impacted, Nissan told the Maine Attorney General’s Office that 18,000 individuals were affected.

Nissan North America, or Nissan USA, is a wholly owned subsidiary of Japanese car maker Nissan Motor Corporation, manufacturing and selling Nissan and Infiniti vehicles through a network of over 1,000 Nissan and 200 Infiniti dealers in the US.

Related: 16 Car Makers and Their Vehicles Hacked via Telematics, APIs, Infrastructure

Related: Tesla Returns as Pwn2Own Hacker Takeover Target

Related: US Subsidiary of Automotive Hose Maker Nichirin Hit by Ransomware

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Expert Insights

Related Content

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Data Breaches

GoTo said an unidentified threat actor stole encrypted backups and an encryption key for a portion of that data during a 2022 breach.

Data Breaches

Companies affected by the recent Mailchimp data breach have started notifying customers. The list includes WooCommerce, FanDuel, Yuga Labs and the Solana Foundation.

Data Breaches

Zacks Investment Research is informing 820,000 individuals that their personal data was compromised in a data breach.

Application Security

A new report finds that barely 1% of all SBOMs being generated today meets the “minimum elements” defined by the U.S. government.

Data Breaches

T-Mobile disclosed another massive data breach affecting approximately 37 million customer accounts.

Supply Chain Security

Oracle's Critical Patch Update for January 2023 includes 327 patches, with more than 70 that address critical-severity vulnerabilities.

Data Breaches

A ransomware attack on Yum Bands forced the parent company of KFC and Taco Bell to close hundreds of restaurants in the United Kingdom