Back Therecord.Media

Nissan says stolen data came from third

Therecord.Media • April 1, 2026

A hacking group claimed this week to have breached the file-transfer system used by a company that offers services to Nissan and Infiniti dealerships across North America. Nissan said there was no indication "customer information was accessed or put at risk."

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Nissan Confirms Data Breach from Third-Party Vendor Amid Everest Ransomware Threat Nissan has confirmed a data breach involving a third-party vendor after the Everest ransomware group claimed to have stolen 910GB of sensitive data, including customer and dealership information. The breach occurred through the file transfer system used by Nissan and Infiniti dealerships in North America. Everest has threatened to release the stolen data if a ransom is not paid, highlighting that Nissan has not compromised its own systems. The ransomware group claims to have obtained data from a compromised FTP server, which had exposed credentials that were publicly available since September 2023. Despite the breach, Nissan stated that there is no indication that customer information was accessed or put at risk. The situation is compounded by Everest's history of targeting Nissan, including a previous incident in 2024 affecting nearly 100,000 customers. As of April 3, 2026, Everest warned it would publish the stolen data if the ransom demand is not met. 3 sources 49

Extracted Entities

Nissan says stolen data came from third

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)