Skoda issues data breach alert for its online shop: hackers accessed customer information
Car manufacturer Skoda has experienced a data breach that may have exposed customers’ personal information.
Logo of Skoda is pictured in Berlin, Germany. Florian Gaertner/Photothek/Getty.
Car manufacturer Skoda has experienced a data breach that may have exposed customers’ personal information.
- Skoda issues data breach alert for its online shop: hackers accessed customer information.
- the company can't confirm if data was stolen but warns customers to take precautions.
- No financial data compromised as payment information is handled separately.
Key Takeaways by nexos.ai, reviewed by Cybernews staff.
During a recent technical security monitoring exercise, Skoda discovered that several unauthorized individuals had exploited a vulnerability in the software used to run its online shop. That’s how the attackers gained temporary access to the online shop and the data stored there.
Skoda’s online shop contained customers’ personal information, including full names, postal addresses, email addresses, phone numbers, order history, and hashed passwords.
No credit card numbers or other financial information were stored here, as this information is exclusively processed by payment service providers.
As a precaution, Skoda’s online shop was taken offline as soon as the incident came to light. The vulnerability has since been eliminated, and the incident has been handed over to a specialized IT forensics department for technical analysis. The incident has also been reported to the relevant data protection authority.
The car manufacturer can’t say for sure whether customers’ personal details were actually copied or retrieved.
“We currently have no concrete evidence of misuse of customer data. Since data access cannot be ruled out with absolute certainty, we are informing you as a precautionary measure to enable you to take your own protective measures,” Skoda says.
Customers are being warned about phishing messages or unsolicited contacts related to previous orders or known data. The attackers may also try to log in to other online accounts, especially if the same password is used for other online services.
Check if your data has been leaked
“These risks exist, regardless of whether actual misuse has already occurred. By handling messages containing personal data or login credentials consciously and carefully, potential consequences can be avoided,” Skoda recommends.
The car manufacturer is advising customers to change their passwords at other online services if they are identical or similar to the Skoda online shop.
Furthermore, victims should be vigilant for suspicious emails, text messages, and calls. Lastly, customers should regularly check their bank and credit card statements and inform their payment service provider if they come across any anomalies.
Unlock more exclusive Cybernews content on YouTube.