Nissan to let 100,000 Aussies and Kiwis know their data was stolen in cyberattack

Over the next few weeks, Nissan Oceania will make contact with around 100,000 people in Australia and New Zealand whose data was pilfered in a December 2023 attack on its systems – perhaps by the Akira ransomware gang. The cyberbaddies stole some form of government identification from up to ten percent of victims. Among the …

[sanmigueelbeer]

Oh what a feeling ...

[xyz123]

Short version - Nissan execs sell customer data to scammers, claim its not their fault.

[cornetman]

> Among the data stolen from the automotive manufacturer was info on 4,000 Medicare cards - Australia's national health insurance scheme - plus 7,500 driving licenses, 220 passports, and 1,300 tax file numbers.

It wasn't clear to me if the data belonged to customers or employees of the company.

If it were customers, I don't really understand why a car manufacturer would have these types of information.

[Yorick Hunt]

"I don't really understand why a car manufacturer would have these types of information"

Vendor-financed car loans.

The more pertinent question is, why would they need to retain this information after the loan approval process has been completed?

[Diogenes]

The more pertinent question is, why would they need to retain this information after the loan approval process has been completed?

When the inevitable " you shouldn't have given me this loan which I can obviously can't afford" lawsuit, Financial ombudsma, Royal Commissionn etc complaints come in

[Anonymous Coward]

So they can sell it, obviously.

[sitta_europea]

All right, I *can* sort of see an argument for keeping some of that information.

What I can *not* see is an argument for keeping it in a form that's accesible to anyone on the Internet.