ELECQ warns of data breach after ransomware attack on EV charger cloud

ELECQ, a manufacturer of smart electric vehicle chargers, is alerting its customers to a potential data breach following a ransomware attack on its cloud systems. The incident, detected on March 7, involved attackers encrypting and copying user data. The company has begun notifying affected individuals, The Register reports.

The ransomware attack targeted ELECQ's AWS cloud platform, leading to the encryption and exfiltration of customer data. The compromised information includes names, email addresses, phone numbers, and addresses. ELECQ has stated that no financial data, such as payment records or credit card information, was accessed. The company also emphasized that the EV charging devices themselves were not affected and remain secure. ELECQ initiated its incident response immediately, taking affected servers offline and restoring systems from backups. They have since enhanced security measures, including disabling remote access services and strengthening network encryption.

ELECQ has reported the incident to regulators, including the UK's Information Commissioner's Office and Germany's Federal Commissioner for Data Protection and Freedom of Information, suggesting a potential impact on European customers. The company is working with third-party cybersecurity specialists to conduct a forensic investigation. Customers are advised to monitor for phishing attempts, reset passwords, and be vigilant for suspicious activity, as compromised details can facilitate social engineering scams. The number of affected individuals and whether a ransom was demanded remain undisclosed.