Ford is investigating allegations that it suffered a data breach after a menace actor claimed to leak 44,000 buyer data on a hacking discussion board.
The leak was introduced on Sunday by menace actor ‘EnergyWeaponUser,’ additionally implicating the hacker ‘IntelBroker,’ who supposedly took half within the November 2024 breach.
The menace actors leaked on BreachForums 44,000 Ford buyer data containing buyer info, together with full names, bodily places, buy particulars, seller info, and document timestamps.
The uncovered data aren’t extraordinarily delicate, however they nonetheless comprise personally identifiable info that might empower phishing and social engineering assaults concentrating on the uncovered people.
The menace actors didn’t try and promote the dataset however as a substitute provided it to registered members of the hacker discussion board for eight credit, equal to just a little over $2.
Supply: BleepingComputer
BleepingComputer contacted Ford to validate the claims, and a spokesperson for the agency advised us they’re investigating the allegations.
“Ford is conscious and is actively investigating the allegations that there was a breach of Ford information. Our investigation is lively and ongoing,” Ford advised BleepingComputer.
The involvement of IntelBroker within the breach lends some credibility to the menace actor’s allegations primarily based on the menace actor’s latest document.
The hacker has just lately achieved confirmed breaches at Cisco’s DevHub portal, Nokia (by means of a 3rd social gathering), Europol’s EPE net portal, and T-Cell (by way of a vendor).
The places talked about within the information samples leaked by the menace actors are from world wide, together with america.
To mitigate the dangers arising from this potential information publicity, deal with unsolicited communications cautiously and reject requests to disclose extra info beneath any pretense.
Replace 11/20 – Ford despatched BleepingComputer a further assertion primarily based on new findings from their ongoing investigation.
Ford’s investigation has decided that there was no breach of Ford’s programs or buyer information. The matter concerned a third-party provider and a small batch of publicly accessible sellers’ enterprise addresses. It’s our understanding that the matter has now been resolved. – A Ford spokesperson
