Hackers have managed to exfiltrate personal information of approximately 21,000 Nissan customers by accessing a third-party’s digital environment.
Red Hat, a company that designs customer management systems for sales clients, detected unauthorized access on September 26th, 2025.
Nissan, one of Red Hat’s customers, received word of the security breach on October 3rd, 2025. The car manufacturer reported the incident immediately to the Personal Information Protection Commission.
According to Nissan, personal details of approximately 21,000 customers have been stolen, including names, addresses, phone numbers, email addresses, and customer-related information used in sales activities. No financial information, such as credit card numbers, was involved in the incident.
“At this time, it has not been confirmed that the leaked information was used for secondary purposes. However, we ask that you be extremely careful when contacting us via suspicious phone calls, mail, etc.,” Nissan says in a press release.
The Japanese car manufacturer concludes its statement by reassuring affected customers that the incident is taken seriously, that it will strengthen its monitoring system for its contractors, and that it will continue to strengthen its information security.
On October 2nd, 2025, Red Hat disclosed that hackers managed to break into a GitLab environment that was being used by the Red Hat Consulting team.
“Upon detection, we promptly launched a thorough investigation, removed the unauthorized party’s access, isolated the instance, and contacted the appropriate authorities. Our investigation, which is ongoing, found that an unauthorized third party had accessed and copied some data from this instance,” the company wrote in a press release at the time.
According to security researcher Kevin Beaumont, over 5,000 high-profile customers were at risk because of the incident at Red Hat, including ING Bank and Delta Airlines.
He recommended that affected customers should change their certificates and stored credentials immediately, and assume that all stolen data will be made public.
Unlock more exclusive Cybernews content on YouTube.
Your email address will not be published. Required fields are markedmarked