Red Hat GitLab breach exposes data of 21,000 Nissan customers

Nissan disclosed a data breach tied to a self-managed GitLab instance used by Red Hat Consulting, with data exposed from 21,000 Nissan customers. According to Security Affairs, the compromised data included names, addresses, phone numbers, partial email addresses and sales-related information, but Nissan said no financial data or additional customer records were affected.

The breach stemmed from unauthorized access to a GitLab instance holding sample code, internal communications and project specifications; Nissan noted that some data from Nissan Fukuoka Sales Co., Ltd. was leaked. The incident was first reported to Nissan by Red Hat, with Red Hat informing Nissan on 3 October 2025, and Nissan then notifying the Personal Information Protection Commission and directly contacting potentially affected customers.

The Crimson Collective has claimed it stole 570GB from Red Hat’s private GitHub repositories, including CERs containing sensitive network data, though Security Affairs notes the claim jury remains unverified.