Data and location records tied to 800,000 Volkswagen EVs exposed
Customer information and location data related to around 800,000 electric vehicles were exposed at Cariad, Volkswagen's software subsidiary. Precise location data for vehicles in Europe was exposed for several months, and a cloud misconfiguration and poor security management of AWS credentials were identified as the cause.
Key facts
- Affected organisation
- Volkswagen
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Customer information and location data related to around 800,000 electric vehicles
- Cause / method
- Cloud misconfiguration and poor security management of AWS credentials at Cariad
- Location
- Germany
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
Timeline
- The exposure of information related to around 800,000 Volkswagen electric vehicles and several months of location data came to light.
- Poor security management of AWS credentials was identified as the cause of the data exposure.
13 related reports
- Volkswagen leak exposed precise location data on thousands of vehicles across Europe for months
- In-Depth Technical Analysis: Volkswagen Cariad Cloud Misconfiguration Exposes Data of 800,000 Electric Vehicle Owners
- Volkswagen leak exposed location data for 800,000 electric cars
- Brothel Visits Exposed In Volkswagen Location Data Leak
- 800,000 Volkswagen EV Owners Affected in Massive Data Leak at Software Subsidiary Cariad
- Volkswagen leak exposed location of 800,000 electric car drivers for months
- Volkswagen software arm exposes some 800,000 customers
- Volkswagen Breach Exposes Data of 800K EV Customers
- Volkswagen massive data leak caused by a failure to secure AWS credentials
- Volkswagen leak exposes data of 800,000 EV owners
- Volkswagen comes under fire for major data leak exposing driver location
- 독일 해커 단체 “폭스바겐, AWS 보안 관리 부실로 대규모 데이터 유출”
- 800,000 VW electric vehicle owners' data exposed by software bug
Other incidents at Volkswagen
Volkswagen investigates cyber-attack on French subsidiary
Volkswagen investigated a cyber-attack targeting its French subsidiary. The Qilin group claimed to have stolen data, and a separate 8Base ransomware attack on Volkswagen was also mentioned. The attacker and the extent of the damage have not been determined.
Related reports: 2 →Stormous claims Volkswagen cyber-attack but offers no evidence
The ransomware group Stormous claimed to have carried out a cyber-attack on Volkswagen. No evidence was presented to support the breach claim, so whether any damage actually occurred and its extent have not been confirmed.
Related reports: 2 · last report →Volkswagen app OTP bypass exposes vehicle-related personal data
Impact: Vehicle-related personal information
A hack was uncovered in which the one-time password (OTP) in the Volkswagen app was bypassed to access vehicle-related personal information. The specific scale of the damage and the response measures have not been confirmed.
Related reports: 2 · last report →$3.5 million Volkswagen data breach settlement upheld
A $3.5 million settlement was reached over a Volkswagen data breach. The settlement was upheld on appeal.
Read on Bloomberg Law News ↗Signs of Chinese hacker involvement in years-long Volkswagen breach
Volkswagen suffered a breach spanning several years. Signs of Chinese hacker involvement have emerged; the specific extent of the damage and the response have not been confirmed.
Read on Cybernews ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.