Ford investgates alleged breach following buyer information leak

Ford is investigating allegations that it suffered an information breach after a risk actor claimed to leak 44,000 buyer information on a hacking discussion board.

The leak was introduced on Sunday by risk actor ‘EnergyWeaponUser,’ additionally implicating the hacker ‘IntelBroker,’ who supposedly took half within the November 2024 breach.

The risk actors leaked on BreachForums 44,000 Ford buyer information containing buyer info, together with full names, bodily areas, buy particulars, seller info, and report timestamps.

The uncovered information aren’t extraordinarily delicate, however they nonetheless comprise personally identifiable info that might empower phishing and social engineering assaults focusing on the uncovered people.

The risk actors didn’t try and promote the dataset however as an alternative supplied it to registered members of the hacker discussion board for eight credit, equal to a bit of over $2.

Alleged Ford data leaked on hacking forum
Alleged Ford information leaked on hacking discussion board
Supply: BleepingComputer

BleepingComputer contacted Ford to validate the claims, and a spokesperson for the agency informed us they’re investigating the allegations.

“Ford is aware and is actively investigating the allegations that there has been a breach of Ford data. Our investigation is active and ongoing,” Ford informed BleepingComputer.

The involvement of IntelBroker within the breach lends some credibility to the risk actor’s allegations primarily based on the risk actor’s current report.

The hacker has just lately achieved confirmed breaches at Cisco’s DevHub portal, Nokia (by means of a 3rd occasion), Europol’s EPE internet portal, and T-Cellular (by way of a vendor).

The areas talked about within the information samples leaked by the risk actors are from all over the world, together with america.

To mitigate the dangers arising from this potential information publicity, deal with unsolicited communications cautiously and reject requests to disclose extra info below any pretense.

Recent articles