Volkswagen security incident history
Hacking, data breaches and other security incidents involving Volkswagen, with related coverage.
Volkswagen investigates cyber-attack on French subsidiary
Volkswagen investigated a cyber-attack targeting its French subsidiary. The Qilin group claimed to have stolen data, and a separate 8Base ransomware attack on Volkswagen was also mentioned. The attacker and the extent of the damage have not been determined.
Related reports: 2 →Stormous claims Volkswagen cyber-attack but offers no evidence
The ransomware group Stormous claimed to have carried out a cyber-attack on Volkswagen. No evidence was presented to support the breach claim, so whether any damage actually occurred and its extent have not been confirmed.
Related reports: 2 · last report →Volkswagen app OTP bypass exposes vehicle-related personal data
Impact: Vehicle-related personal information
A hack was uncovered in which the one-time password (OTP) in the Volkswagen app was bypassed to access vehicle-related personal information. The specific scale of the damage and the response measures have not been confirmed.
Related reports: 2 · last report →Data and location records tied to 800,000 Volkswagen EVs exposed
Impact: Customer information and location data related to around 800,000 electric vehicles
Customer information and location data related to around 800,000 electric vehicles were exposed at Cariad, Volkswagen's software subsidiary. Precise location data for vehicles in Europe was exposed for several months, and a cloud misconfiguration and poor security management of AWS credentials were identified as the cause.
Related reports: 13 · last report →$3.5 million Volkswagen data breach settlement upheld
A $3.5 million settlement was reached over a Volkswagen data breach. The settlement was upheld on appeal.
Read on Bloomberg Law News ↗Signs of Chinese hacker involvement in years-long Volkswagen breach
Volkswagen suffered a breach spanning several years. Signs of Chinese hacker involvement have emerged; the specific extent of the damage and the response have not been confirmed.
Read on Cybernews ↗