Nissan Infosec Breach

Date: November, 2023

Nissan Motor Co. Ltd. is the ninth-largest automobile maker in the world and the leading Japanese brand in China, Russia, and Mexico. It is a Japanese multinational automobile manufacturer headquartered in Yokohama, Kanagawa, Japan, with over 120,000 employees worldwide. The company is renowned for its commitment to quality, innovation, and reliability in the automobile industry.

What Was the Breach?

  • Past and Current Employees Personal Information
  • Employees Social Security Number
  • Customers Personal Information

How Did the Breach Occur?

According to the sample letter included with the breach notification, the attack was a targeted cyber attack. The criminal threat actor compromised the company’s external VPN, shut down certain Nissan systems, and demanded payment.

When Did This Breach Occur?

As published in the company’s disclosure to the US State of Maine, the breach first appeared in November 2023 through a targeted cyberattack and continued until March 2024, when Nissan disclosed that the Akira ransomware gang hit its Oceania division’s systems.

Who Does the Breach Impact?

Based on the information provided by Nissan, the breach affected both past and current employees. According to Nissan's claims, there was no indication that the employees' data was among the criminal's major targets. However, the Akira ransomware gang breach also affected its customers.

How Many Files Does the Breach Affect?

This breach is the largest in Nissan’s history, as 53,038 stateside Nissan employees and over 100,000 customers may have had direct impacts from this event. This impact figure may increase if the data accessed is misused although Nissan claims this is yet to occur. The company has taken several preventive and corrective measures, such as the implementation of Carbon Black monitoring on all compatible systems, vulnerability scans, and other actions to address unauthorized access.

Recent Breaches

Free Identity Exposure Scan
Free Identity Exposure Scan
Instantly and Securely Check if Your Personal Information is Exposed on the Dark Web or Sold by Data Brokers
Please enter first name
Please enter last name
Please select a state
Close
Free Identity Threat Scan
Instantly Check if Your Personal Information is Exposed
All fields below are required
Please enter first name
Please enter last name
Please enter a city
Please select a state
Please enter an age
Please enter an email address
Close