Incident

Autovista Group Disrupts European and Australian Operations Following Ransomware Attack


Learn More

Autovista Group, a London-based automotive data and analytics provider, confirmed a ransomware attack that has disrupted its services across Europe and Australia. The incident, disclosed in a public statement, forced the company to take several core applications offline to contain the threat. 

The incident has impacted high-value tools used by manufacturers, dealers, and insurers for vehicle valuation and trend analysis.

To stop the ransomware from spreading, Autovista pulled email access for a significant portion of its staff, making standard communication channels unavailable. Some customer organizations have reportedly responded by blocking all inbound traffic from Autovista domains and sanitizing files to remove potential malicious links or executables, treating the incident as a high-risk supply chain threat.

The compromised or disrupted data includes:

  • Internal employee email communications
  • Vehicle identification and valuation datasets
  • Repair estimation and specification data
  • Residual value monitoring and trend analysis records
  • Total cost of ownership (TCO) tool data

The number of affected individuals is not disclosed. 

Autovista hired external security firms to lead the investigation and help rebuild impacted systems. The company isolated affected infrastructure and is currently working to restore applications for its brands.

Autovista Group Disrupts European and Australian Operations Following Ransomware Attack