Powered by MOMENTUM MEDIA
cyber daily logo
Breaking news and updates daily. Subscribe to our Newsletter

Ferrari hit by ransomware attack, customer details compromised

Prestige Italian car-maker Ferrari has revealed it was the victim of a ransomware attack.

user icon David Hollingworth
Tue, 21 Mar 2023
Ferrari hit by ransomware attack, customer details compromised
expand image

The company made the announcement after being contacted by an unnamed threat actor demanding a ransom. However, Ferrari has said it will not pay the ransom but has contacted the affected customers to inform them of the possible breach.

“As a policy, Ferrari will not be held to ransom as paying such demands funds criminal activity and enables threat actors to perpetuate their attacks,” a spokesperson said in a release.

“Instead, we believed the best course of action was to inform our clients and thus we have notified our customers of the potential data exposure and the nature of the incident.”

============
============

Ferrari has also said that the breach has had zero impact on its production systems. The company is working with a third-party security company to investigate the breach and is working with law enforcement.

The letter — shared on Twitter by security specialist Troy Hunt of Have I Been Pwned — said that the breached data includes names and addresses, emails, and telephone numbers. Ferrari believes, however, that that is the extent of the compromised data.

“Based on our investigation,” the letter read, “no payment details and/or bank account numbers and/or other sensitive payment information, nor details of Ferrari cars owned or ordered have been stolen”.

Heaven forbid that anyone with a shiny new Ferrari in their driveway should have the fact that they have, in fact, bought a Ferrari revealed to the public.

Assuming this is, in fact, a unique attack, it is the second breach that Ferrari has suffered within the last six months.

In October 2022, the company revealed that its Maranello subsidiary suffered a data breach, which saw 7GB of internal documents and manuals compromised.

At the time, the RansomEXX gang claimed responsibility for the breach.

David Hollingworth

David Hollingworth

David Hollingworth has been writing about technology for over 20 years, and has worked for a range of print and online titles in his career. He is enjoying getting to grips with cyber security, especially when it lets him talk about Lego.

newsletter
cyber daily subscribe
Be the first to hear the latest developments in the cyber industry.