Nissan North America ransomware attack exposes data of over 53,000 employees
Nissan North America was attacked in November 2023, exposing the personal information of more than 53,000 current and former employees. The leaked information included Social Security numbers, and the attackers targeted an external VPN before shutting down some systems and demanding money. In March 2026, a $1.5 million settlement was reached over the incident.
Key facts
- Affected organisation
- Nissan
- Incident type
- Ransomware
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal information including Social Security numbers of more than 53,000 current and former employees
- Cause / method
- Ransomware attack targeting an external VPN
- Location
- United States
If your data was exposed
Exposed dataNational ID number
Timeline
- Nissan North America disclosed that a November 2023 attack had exposed the personal information of more than 53,000 current and former employees.
- It emerged that employees' Social Security numbers had been exposed in the ransomware attack.
- A $1.5 million settlement was reached over the Nissan North America personal data breach.
6 related reports
- Nissan North America data breach impacts over 53,000 employees
- Nissan data breach exposed Social Security numbers of thousands of employees
- Nissan reveals ransomware attack exposed 53,000 workers' social security numbers
- Nissan data breach impacts 50K+ employees
- Nissan Oceania call centre impacted by OracleCMS data breach
- $1.5M Nissan North America data breach settlement
Other incidents at Nissan
Unauthorised access at Nissan contractor may have exposed 74 personal information records
↳ Knock-on damage from the Nissan Financial Services incident · View original incident74Impact: Possible leak of 74 personal information records
A cyber-attack on a Nissan contractor may have resulted in a leak of customers' personal information. The suspected leak reported on 13 November involved 74 personal information records.
Related reports: 2 →Nissan employee data exposed in Oracle PeopleSoft hack
Impact: Employee information in several countries; number of people unknown
Nissan confirmed a breach of employee data linked to attacks targeting Oracle PeopleSoft. The attack was linked to the exploitation of a zero-day vulnerability, and damage spanning several countries was disclosed. Nissan disclosed the employee data breach on 29 June.
Related reports: 6 · last report →Nissan: 21,000 customers' data exposed in hack of partner Red Hat
21kImpact: Data on 21,000 customers leaked
Data on 21,000 Nissan Motor customers was leaked through a hack of servers belonging to its partner Red Hat. Nissan Motor confirmed the customer data breach in December 2025.
Related reports: 9 · last report →Nissan confirms data breach at design studio
Nissan confirmed a data breach at its design studio. The ransomware group Qilin claimed responsibility for the breach, and the specific extent of the damage and the response measures have not been confirmed.
Read on BleepingComputer ↗Nissan cyber-attack in Australia and New Zealand affects about 100,000 people
100kImpact: About 100,000 customers, employees and others in Australia and New Zealand
A cyber-attack on Nissan's Australian and New Zealand operations affected about 100,000 customers and employees. The Akira ransomware group claimed responsibility for the attack. Nissan confirmed that customer information had been accessed and later disclosed the scale of the impact.
Related reports: 8 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.