Back Scworld

Third-party hack affirmed by Nissan after Everest ransomware assertions | brief

Scworld • April 3, 2026

Major Japanese multinational automaker Nissan has confirmed having its data compromised in a cyberattack against a third-party vendor earlier this year after the Everest ransomware operation alleged to have pilfered 910 GB of customer, dealership, and loan data from the file transfer system leveraged by North American Nissan and Infiniti dealerships, reports The Record , a news site by cybersecurity firm Recorded Future.

"We have found no indication that Nissan systems were compromised or that any Nissan customer information was accessed or put at risk. We are working closely with the vendor as it completes its investigation," said a Nissan spokesperson.

Everest, which claimed to have extorted Nissan since breaching its file transfer system in January, warned that it would publish the stolen data trove by Apr. 3. Such a development comes after a series of cyberattacks against Nissan over the past few years, including a 2024 intrusion that impacted nearly 100,000 of the automaker's customers and employees in Australia and New Zealand.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Nissan Confirms Data Breach from Third-Party Vendor Amid Everest Ransomware Threat Nissan has confirmed a data breach involving a third-party vendor after the Everest ransomware group claimed to have stolen 910GB of sensitive data, including customer and dealership information. The breach occurred through the file transfer system used by Nissan and Infiniti dealerships in North America. Everest has threatened to release the stolen data if a ransom is not paid, highlighting that Nissan has not compromised its own systems. The ransomware group claims to have obtained data from a compromised FTP server, which had exposed credentials that were publicly available since September 2023. Despite the breach, Nissan stated that there is no indication that customer information was accessed or put at risk. The situation is compounded by Everest's history of targeting Nissan, including a previous incident in 2024 affecting nearly 100,000 customers. As of April 3, 2026, Everest warned it would publish the stolen data if the ransom demand is not met. 3 sources 49

Extracted Entities

Third-party hack affirmed by Nissan after Everest ransomware assertions | brief

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Countries (2)

Ransomware Groups (1)