Stellantis data breach after Salesforce hack exposed customer information in North America. The automaker confirmed attackers accessed a third-party platform and stole contact details.


Details of the Breach

Hackers targeted Salesforce, which supports Stellantis’s customer service operations. The attackers obtained customer names, email addresses, and phone numbers. Stellantis confirmed that the breached system held no financial or highly sensitive personal data.


Stellantis Response

The company acted quickly after detecting unauthorized access. Stellantis launched an internal investigation, involved cybersecurity experts, and notified law enforcement. It also reached out to affected customers and explained the nature of the breach.


Link to ShinyHunters

Security researchers linked the incident to ShinyHunters, a known extortion group. Reports suggest the group accessed over 18 million records from Stellantis’s Salesforce instance. The attackers previously exploited Salesforce weaknesses and OAuth tokens to target other organizations.


Protecting Customers

Stellantis advised customers to watch for phishing attempts. Suspicious emails, texts, or calls may attempt to exploit the stolen contact information. Customers should verify communications and avoid clicking unknown links.


Conclusion

Stellantis data breach after Salesforce hack highlighted risks tied to third-party platforms. The company confirmed that attackers stole contact information but no financial data. Stellantis continues to work with investigators and urges customers to remain vigilant.


0 responses to “Stellantis Data Breach After Salesforce Hack”