Nissan Confirms Impact From Red Hat Data Breach

Nissan has disclosed the impact of a data breach involving a self-managed GitLab instance used by Red Hat’s consulting team, with the incident occurring in late September. The breach led to the theft of the personal information of 21,000 Nissan Fukuoka Sales customers, including names, addresses, phone numbers, partial email addresses, and information used for sales activities, though no credit card data was stolen.

A hacking group named Crimson Collective claimed to extort Red Hat and to have removed 570 GB of data from 28,000 private repositories. Nissan says it has informed the affected individuals and reported the incident to the relevant authorities, and notes that it could not confirm reports that the stolen information might have been “used twice” by the threat actors. Red Hat notified Nissan of the incident on 3 October, according to Red Hat.

The breach follows the disclosure that the compromised repository contained internal communications and project specifications, with Nissan stating that some data from Red Hat’s instance was involved in the incident. Written by Ionut Arghire.