Stellantis customer data breach: Difference between revisions
added archive links, added see also section |
wording changes to better fit guidelines |
||
| Line 10: | Line 10: | ||
==Customer Data Breach== | ==Customer Data Breach== | ||
On September 21, 2025, Stellantis North America reported the data breach on their website.<ref name=":0">{{Cite web |date=2025-09-21 |title=Third-Party Platform Data Incident |url=https://media.stellantisnorthamerica.com/newsrelease.do?id=27079 |url-status=live |archive-url=https://web.archive.org/web/20250923153055/https://media.stellantisnorthamerica.com/newsrelease.do?id=27079 |archive-date=2025-09-23 |access-date=2025-09-28 |website=Stellantis North America}}</ref> They | On September 21, 2025, Stellantis North America reported the data breach on their website.<ref name=":0">{{Cite web |date=2025-09-21 |title=Third-Party Platform Data Incident |url=https://media.stellantisnorthamerica.com/newsrelease.do?id=27079 |url-status=live |archive-url=https://web.archive.org/web/20250923153055/https://media.stellantisnorthamerica.com/newsrelease.do?id=27079 |archive-date=2025-09-23 |access-date=2025-09-28 |website=Stellantis North America}}</ref> They stated that the data was limited to contact information and that the breach did not involve any financial or sensitive personal information. They did not include an estimate of impacted customers. Bleeping Computer reported that extortion group ShinyHunters took credit for the breach, stating that they stole over 18 million Salesforce records pertaining to contact information.<ref name=":1">{{Cite web |last=Gatlan |first=Sergiu |date=2025-09-22 |title=Automaker giant Stellantis confirms data breach after Salesforce hack |url=https://www.bleepingcomputer.com/news/security/automaker-giant-stellantis-confirms-data-breach-after-salesforce-hack/ |url-status=live |archive-url=https://web.archive.org/web/20250924065416/https://www.bleepingcomputer.com/news/security/automaker-giant-stellantis-confirms-data-breach-after-salesforce-hack/ |archive-date=2025-09-24 |access-date=2025-09-28 |website=Bleeping Computer}}</ref> | ||
==Company Response== | ==Company Response== | ||
| Line 18: | Line 18: | ||
==Background== | ==Background== | ||
The ShinyHunters group accessed Stellantis data as part of a larger effort targeted at Salesforce, which included data stolen from many other large companies in 2025, such as Google, Cisco, and Workday.<ref name=":1" /> | The Bleeping Computer reports that the ShinyHunters group accessed Stellantis data as part of a larger effort targeted at Salesforce, which included data stolen from many other large companies in 2025, such as [[Google]], [[Cisco Systems, Inc.]], and Workday.<ref name=":1" /> The group did not reveal to Bleeping Computer the methods used to gain access in this incident, however, their tactics in the similar attacks on Salesforce included social engineering<ref>{{Cite web |last=Toulas |first=Bill |date=2025-06-04 |title=Google: Hackers target Salesforce accounts in data extortion attacks |url=https://www.bleepingcomputer.com/news/security/google-hackers-target-salesforce-accounts-in-data-extortion-attacks/ |url-status=live |archive-url=https://web.archive.org/web/20250919162222/https://www.bleepingcomputer.com/news/security/google-hackers-target-salesforce-accounts-in-data-extortion-attacks/ |archive-date=2025-09-19 |access-date=2025-09-29 |website=Bleeping Computer}}</ref> and stolen credentials that allowed access through the Salesloft Drift AI chat integration with Salesforce.<ref>{{Cite web |last=Abrams |first=Lawrence |date=2025-08-28 |title=Google warns Salesloft breach impacted some Workspace accounts |url=https://www.bleepingcomputer.com/news/security/google-warns-salesloft-breach-impacted-some-workspace-accounts/ |url-status=live |archive-url=https://web.archive.org/web/20250912100941/https://www.bleepingcomputer.com/news/security/google-warns-salesloft-breach-impacted-some-workspace-accounts/ |archive-date=2025-09-12 |access-date=2025-09-29 |website=Bleeping Computer}}</ref> | ||
==See Also== | ==See Also== | ||
Revision as of 00:47, 1 October 2025
❗Article Status Notice: This Article is a stub
This article is underdeveloped, and needs additional work to meet the wiki's Content Guidelines and be in line with our Mission Statement for comprehensive coverage of consumer protection issues. Learn more ▼
Stellantis customer data was exposed in a breach through a third-party platform on September 21, 2025. The hackers accessed contact information of customers in North America.
Customer Data Breach
On September 21, 2025, Stellantis North America reported the data breach on their website.[1] They stated that the data was limited to contact information and that the breach did not involve any financial or sensitive personal information. They did not include an estimate of impacted customers. Bleeping Computer reported that extortion group ShinyHunters took credit for the breach, stating that they stole over 18 million Salesforce records pertaining to contact information.[2]
Company Response
In their initial report, Stellantis North America remarked on their response to the incident:[1]
Upon discovery, we immediately activated our incident response protocols, initiated a comprehensive investigation, and took prompt action to contain and mitigate the situation. We are also notifying the appropriate authorities and directly informing affected customers.
Background
The Bleeping Computer reports that the ShinyHunters group accessed Stellantis data as part of a larger effort targeted at Salesforce, which included data stolen from many other large companies in 2025, such as Google, Cisco Systems, Inc., and Workday.[2] The group did not reveal to Bleeping Computer the methods used to gain access in this incident, however, their tactics in the similar attacks on Salesforce included social engineering[3] and stolen credentials that allowed access through the Salesloft Drift AI chat integration with Salesforce.[4]
See Also
- Ticketmaster Entertainment, LLC ShinyHunters data breach
- Volkswagen car-location data-exposure incident
References
- ↑ 1.0 1.1 "Third-Party Platform Data Incident". Stellantis North America. 2025-09-21. Archived from the original on 2025-09-23. Retrieved 2025-09-28.
- ↑ 2.0 2.1 Gatlan, Sergiu (2025-09-22). "Automaker giant Stellantis confirms data breach after Salesforce hack". Bleeping Computer. Archived from the original on 2025-09-24. Retrieved 2025-09-28.
- ↑ Toulas, Bill (2025-06-04). "Google: Hackers target Salesforce accounts in data extortion attacks". Bleeping Computer. Archived from the original on 2025-09-19. Retrieved 2025-09-29.
- ↑ Abrams, Lawrence (2025-08-28). "Google warns Salesloft breach impacted some Workspace accounts". Bleeping Computer. Archived from the original on 2025-09-12. Retrieved 2025-09-29.