Volkswagen Group confirms cybersecurity incident after 8Base ransomware gang claims data theft
Learn More
Volkswagen Group, has confirmed awareness of a cybersecurity incident after claims by the 8Base ransomware group that it successfully stole data from the German automotive giant.
Volkswagen maintains that its core IT infrastructure are not affected by the breach. But the wording focusing on "core infrastructure" leaves open the possibility of a breach at possible third-party, partner or supply chain compromise.
On September 23, 2024, the 8Base group claimed to have stolen confidential files from the automaker and issued threats of public release by September 26, 2024. Although the deadline passed 8Base listed the allegedly stolen data on its dark web leak site. Allegedly stolen data includes:
- Invoices and receipts
- Accounting documents
- Personal employee files
- Employment contracts
- Certificates
- Personnel records
- Numerous confidentiality agreements
- Financial records potentially spanning Volkswagen's global operations
The nature of the attack and number of affected individuals is not disclosed.
