Online attackers take Renault UK customer data for a joyride

"Renault UK customers are being warned their personal data may be in criminal hands after one of its supplier was hacked. In an email sent to affected individuals this week, seen by The Register, the French carmaker said attackers accessed the supplier's systems and made off with customer details including names, gender, phone numbers, email and postal addresses, and vehicle registration and identification numbers."

""Your data was included, which means the attackers have access to some or all of the following information," states the letter. Renault stressed that no bank details were involved, since the supplier in question did not hold financial records. Renault UK boss Adam Wood tried to calm nerves, stressing that the crooks hadn't touched the company's own kit. The stolen data, he said, came from a third-party supplier, not Renault's systems. "None of our own systems have been compromised," Wood insisted."

"Renault did not confirm how many customers are affected and has not answered questions from The Register about the scale of the digital break-in or the identity of the breached supplier. The company's message states the incident has been "contained and removed" and the vendor is taking "all appropriate actions." The breach has been reported to regulators, according to Renault. The ICO did not immediately respond to our questions. ®"

One of Renault UK's suppliers was hacked, and attackers accessed the supplier's systems and exfiltrated customer details including names, gender, phone numbers, email and postal addresses, and vehicle registration and identification numbers. The supplier did not hold financial records, so no bank details were involved. Renault stated none of its own systems were compromised and that the stolen data originated from a third-party vendor. Customers of sister brand Dacia have reportedly received similar warnings. The vendor says the incident has been contained and removed, regulators have been notified, and customers are advised to ignore unsolicited requests and never share passwords.

Read at Theregister