Nissan Motor Co., Ltd.

Summary

Nissan confirmed that it was affected by a breach involving a self-managed GitLab instance used by Red Hat Consulting, which was accessed without authorization and contained example code snippets, internal communications, and project specifications. A hacking group claimed to have stolen a large volume of compressed data from private repositories, including information allegedly tied to customer infrastructure. Nissan said some stolen data included personal information of 21,000 customers of Nissan Fukuoka Sales, including names, addresses, phone numbers, partial email addresses, and sales-related details, but no credit card data was compromised. The company reported the incident to authorities and began notifying affected individuals, while stating it could not confirm claims that the stolen data had been reused by threat actors.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Nissan Motor Co., Ltd. disclosed that it was affected by a data breach involving a self-managed GitLab instance used by the Red Hat Consulting team. The incident occurred in late September and involved unauthorized access to that GitLab environment. The accessed instance contained example code snippets, internal communications, and project specifications. A hacking group named Crimson Collective attempted to extort Red Hat in connection with the breach. The group claimed that it had stolen 570 GB of compressed data from 28,000 private repositories. It also claimed that some of the stolen information allegedly provided access to Red Hat customers’ infrastructure. Nissan’s disclosure identified a direct impact involving customer information associated with Nissan Fukuoka Sales. The company stated that some of the stolen data included personal information of 21,000 customers of Nissan Fukuoka Sales. The affected information included names, addresses, phone numbers, partial email addresses, and sales-related details.

Nissan stated that no credit card data was compromised in the incident. The disclosed breach therefore involved customer identity and contact information, along with sales-related details, but did not include credit card data according to the company’s statement. The incident linked Nissan’s exposure to data stolen from the Red Hat Consulting GitLab instance rather than describing a separate breach of Nissan’s own systems. After the impact was identified, Nissan reported the incident to authorities. The company also began notifying affected individuals. Nissan said it could not confirm reports that the stolen data might have been reused by threat actors. The company’s disclosure did not confirm any reuse of the stolen information and did not provide evidence that such reuse had occurred. The known consequences described in the disclosure were unauthorized access to the Red Hat Consulting GitLab instance, theft claims by Crimson Collective, exposure of Nissan Fukuoka Sales customer information, and notification of affected customers.

Sources

Sources available to members: 1 source.