Bleeping Computer reports that Škoda Auto, a subsidiary of Volkswagen Group, has confirmed a data breach impacting its online shop, leading to the potential compromise of customer personal information.
Attackers exploited an unspecified vulnerability in the software of Škoda's e-commerce portal to gain unauthorized access. The compromised data includes customer names, addresses, details, order information, and login credentials. However, Škoda states that financial information, including full credit card details, was not accessed as it is processed by third-party payment providers. The company has since resolved the vulnerability and reported the incident to data protection authorities.
Škoda warns affected customers to be vigilant against potential phishing attacks and to monitor their financial accounts for any unusual activity. This incident follows similar data breaches affecting other automakers, including Renault, Dacia, and Jaguar Land Rover, highlighting ongoing cybersecurity challenges within the automotive industry.
Source: Bleeping Computer
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
