A Volkswagen Hack Makes 800K EV Customers' Data Public.
Data Belonging To Owners Of Electrical Vehicles Under The Company's Vw, Audi, Seat, And Skoda Brands Was Discovered By The Ethical Hacker Collective Chaos Computer Club.
Last month, a data Breach at the Volkswagen group exposed the private data of about 800,000 owners of electrified vehicles under it's brands, which include Skoda, Audi, Seat, and Volkswagen. An Amazon cloud storage system set up error, which is overseen by software subsidiary Cariad, has been blamed for the breach, which was first revealed by the German website Speigel.
For Months on end, the group allegedly kept location and personal information publicly available online, which led to the hack. The breach was reported to the renowned European Ethical hacking group chaos computer club ( CCC ) by the anonymous hacker who found it. Before alerting Cariad and Vw, the CCC tested the unprotected, open access. Along with location data, email addresses, phone numbers, and home addresses of car owners, the breach exposed vehicle location information, including when EVs were turned on and off.
This hack has impacted a wide range of people, including the Hamburg police and at least two German politicians. Speigel's hired researchers discovered information about cars in Norway, Sweden, the UK, the Netherlands, France, Belgium, and Denmark, although the majority of the impacted vehicles were in Germany. According to Cariad, it took prompt action to resolve the problem and blocked access the same day CCC got in touch with them.