Britain’s luxury car maker Jaguar Land Rover (JLR) allegedly has had its tracking data, source code, and employee details stolen and leaked.
The unconfirmed attack supposedly took place earlier this month, with attackers stealing 700 internal company documents. The attackers announced the attack on a popular data leak forum, alleging they had access to development logs, tracking data, source codes, and personal details of JLR’s employees.
We have reached out to JLR for a comment and will update the article once we receive a reply.
According to the Cybernews research team, the data sample provided in the attackers’ post appears to be legitimate. Moreover, the attacker who announced the leak is a well-known player in the data leak underground, frequently posting legitimate data leaks.
While the leak is not yet confirmed, attackers getting their hands on tracking data could pose security risks to users. For example, they could determine movement patterns of high-value targets. However, it’s not entirely clear what type of tracking data, if any, attackers got their hands on.
Meanwhile, leaked source code could pose risks to JLR company secrets. For example, a leaked GitHub token gave unrestricted access to Mercedes-Benz source code last year, exposing intellectual property passwords and cloud access keys.
Attackers claim that leaked employee details include:
- Usernames
- Email addresses
- Display names
- Operational time zones
The leaked data sample indicates the exposed employees could include JLRs staff from all over the world, as individuals from multiple time zones seem to be affected.
Leaking employee details puts both the company and impacted individuals at risk. Malicious actors could use the leaked details to craft highly personalized phishing attacks, targeting JLR employees with high admin access.
JLR’s best-known brands are Land Rover SUVs and Jaguar sports cars. The UK-based company enjoyed over $37 billion in revenue last year and has nearly 39,000 employees.
Your email address will not be published. Required fields are markedmarked