Škoda Auto Reports Data Breach from Online Shop Hack

Severity: Medium (Score: 54.9)

Sources: Scworld, Bleepingcomputer

Summary

Škoda Auto has confirmed a data breach affecting its online shop, where attackers exploited an unspecified vulnerability to access customer personal information. The compromised data includes names, addresses, email addresses, phone numbers, order details, and login credentials. However, financial information was not accessed as it is processed by third-party payment providers. The company has resolved the vulnerability and reported the incident to data protection authorities. Affected customers are warned to be vigilant against potential phishing attacks and to monitor their financial accounts for unusual activity. The total number of affected customers remains undisclosed. This incident follows similar breaches in the automotive sector, highlighting ongoing cybersecurity challenges. Key Points: • Škoda Auto confirmed a data breach affecting its online shop. • Attackers exploited a vulnerability to access customer personal information. • No financial data was compromised as it is handled by third-party providers.

Key Entities

• Data Breach (attack_type)
• Dacia (company)
• Jaguar Land Rover (company)
• Renault (company)
• Škoda Auto (company)
• T1041 - Exfiltration Over C2 Channel (mitre_attack)
• T1190 - Exploit Public-Facing Application (mitre_attack)