Back News.Bloomberglaw

Stellantis North America Sued Over Everest Ransomware Attack

News.Bloomberglaw • January 21, 2026

Stellantis North America was sued by a married couple from Illinois for allegedly negligently failing to protect customer data after hackers stole their personal information in a ransomware attack.

Loria and Thomas Spadafore filed the class-action lawsuit Wednesday in the US District Court for the Eastern District of Michigan. The complaint alleges the Everest ransomware group breached Stellantis’ systems around December 25, 2025, accessing one terabyte of sensitive customer data.

The hackers threatened to publish the information unless the maker of Jeep, Chrysler, Fiat and other marques paid a ransom, but the company refused and the criminals released the data ...

Bloomberg Law provides trusted coverage of current events enhanced with legal analysis.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Stellantis Faces Class-Action Lawsuit Over Everest Ransomware Data Breach Stellantis North America is being sued by Loria and Thomas Spadafore for allegedly failing to protect customer data during a ransomware attack by the Everest group. The breach, which occurred around December 25, 2025, resulted in the theft of approximately one terabyte of sensitive customer information. 2 sources 52

Extracted Entities

Stellantis North America Sued Over Everest Ransomware Attack

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Ransomware Groups (1)