Cyber Incident Victim: Autosur
Date:
Mar 2025
Location:
France
Summary
Autosur suffereda cyberattack that resulted in unauthorized access to customer personal data. The compromised information includes names, postal addresses, phone numbers, email addresses, license plate numbers, encrypted passwords and vehicle serial numbers. The breach affected a large number of customers, with reports indicating up to twelve million records and approximately three gigabytes of data appearing on dark web markets. The company notified the French data protection authority, filed a police complaint, and an investigation is underway.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Autosur identified a security incident involving unauthorized access to certain personal data. They took immediate measures to stop the incident and reinforce protection. They notified the CNIL and filed a police complaint. The incident and its origin are under investigation by police. They also sent emails to affected customers informing them of the breach.
According to BFMTV, the breach could concern up to 12 million customers. The exposed data includes names, first names, email addresses, postal addresses, phone numbers, and license plate numbers. According to Zataz, the data also comprises encrypted passwords, vehicle serial numbers, registration details, and internal data. The compromised data reportedly amounts to about 3 GB. It has been offered for sale on the dark net.
Autosur does not hold banking data, so those were not affected. The company advised recipients to remain vigilant against phishing emails, SMS, or calls. They reminded them that Autosur never asks for personal codes or identifiers. They provided a contact email ([email protected]) for questions. The breach follows a similar incident affecting Free Mobile a few months earlier. Autosur operates more than 900 centers across France. It works with insurers such as Macif, Groupama, and Axa.