21K Nissan Customers’ Data Stolen in Red Hat Raid
Hear’s a summary of the data from the provided text:
* red Hat Breach: Red Hat experienced a security breach where an unauthorized party accessed and copied data from a GitLab instance managed by Red Hat consulting. This was previously disclosed.
* Nissan Impact: Nissan was notified of the breach on October 3rd after Red Hat detected the intrusion on September 26th. The extent of the impact on Nissan is currently unknown,and they haven’t responded to inquiries about obligation or potential extortion attempts.
* Crimson Collective Claim: A group called Crimson Collective claimed responsibility for the breach, stating they stole 570GB of data from Red Hat’s GitLab repositories, including customer documents.
* Collaboration with ShinyHunters/Scattered Lapsus$ Hunters: Crimson Collective later announced a collaboration with the “Scattered Lapsus$ Hunters” gang (linked to ShinyHunters) to extort Red Hat.
* Timeline:
* september 26: Red Hat detects intruders.
* October 3: Red Hat alerts Nissan.
* Early October: Crimson Collective claims responsibility.
* Later October: Red hat confirms the breach.
* Shortly After: Crimson Collective announces collaboration with Scattered Lapsus$ hunters.