Volkswagen app OTP bypass exposes vehicle-related personal data
A hack was uncovered in which the one-time password (OTP) in the Volkswagen app was bypassed to access vehicle-related personal information. The specific scale of the damage and the response measures have not been confirmed.
Key facts
- Affected organisation
- Volkswagen
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Vehicle-related personal information
- Cause / method
- Bypass of OTP authentication
- Location
- Germany
Timeline
- The issue of vehicle-related personal information being accessed by bypassing the OTP in the Volkswagen app was reported.
- Further details of the Volkswagen app hacking issue were reported.
2 related reports
Other incidents at Volkswagen
Volkswagen investigates cyber-attack on French subsidiary
Volkswagen investigated a cyber-attack targeting its French subsidiary. The Qilin group claimed to have stolen data, and a separate 8Base ransomware attack on Volkswagen was also mentioned. The attacker and the extent of the damage have not been determined.
Related reports: 2 →Stormous claims Volkswagen cyber-attack but offers no evidence
The ransomware group Stormous claimed to have carried out a cyber-attack on Volkswagen. No evidence was presented to support the breach claim, so whether any damage actually occurred and its extent have not been confirmed.
Related reports: 2 · last report →Data and location records tied to 800,000 Volkswagen EVs exposed
Impact: Customer information and location data related to around 800,000 electric vehicles
Customer information and location data related to around 800,000 electric vehicles were exposed at Cariad, Volkswagen's software subsidiary. Precise location data for vehicles in Europe was exposed for several months, and a cloud misconfiguration and poor security management of AWS credentials were identified as the cause.
Related reports: 13 · last report →$3.5 million Volkswagen data breach settlement upheld
A $3.5 million settlement was reached over a Volkswagen data breach. The settlement was upheld on appeal.
Read on Bloomberg Law News ↗Signs of Chinese hacker involvement in years-long Volkswagen breach
Volkswagen suffered a breach spanning several years. Signs of Chinese hacker involvement have emerged; the specific extent of the damage and the response have not been confirmed.
Read on Cybernews ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.