Stellantis Data Breach: Millions of Car Buyers Affected
“`html
Stellantis Data Breach Affects Millions of Customers
A major data breach at Stellantis, the automaker behind Jeep, Fiat, Chrysler, and Dodge, could impact tens of millions of customers in north America. The company confirmed “unauthorized access” to a third-party service platform used for customer service operations.
Stellantis announced the breach in a press release on Sunday, stating that while contact information was exposed, financial information was not affected. The specific types of contact information compromised haven’t been detailed.
The cybercriminal group ShinyHunters has claimed responsibility for the attack, alleging they stole over 18 million Salesforce records containing names and contact information. bleeping Computer reported on ShinyHunters’ claim.
ShinyHunters has been actively targeting Salesforce customers through voice phishing attacks to steal data. Notably, Google confirmed in June that ShinyHunters was responsible for a breach affecting one of its own Salesforce databases.
Stellantis Background
Stellantis was formed in 2021 through the merger of Fiat Chrysler Automobiles and PSA Group. It is currently the world’s fifth-largest automaker by sales volume.
ShinyHunters and Salesforce Attacks
This breach is part of a larger trend of attacks targeting Salesforce customers. ShinyHunters utilizes voice phishing (vishing) to gain access to systems and steal data. This method involves tricking individuals into revealing sensitive information over the phone.
| Cybercriminal Group | Target | Method | Reported data Stolen |
|---|---|---|---|
| ShinyHunters | Stellantis | Voice Phishing / Salesforce Hack | Over 18 million Salesforce records (names, contact info) |
| ShinyHunters | Salesforce Hack |
