Volkswagen Allegedly Hacked in Ransomware Attack as 8Base Claims Data Leak

Volkswagen is being investigated after the 8Base ransomware group claimed a data leak, asserting it had stolen sensitive company information. The group, linked to the Phobos ransomware family, said it breached one of the world’s largest automotive manufacturers, with a claim made on 23 September 2024 and a deadline of 26 September for leaking data, though a public dump did not follow.

In February 2025, a Europol-led operation dismantled 8Base infrastructure, seizing servers and arresting four members in Thailand, but experts warn affiliates could reappear under new names. Volkswagen’s official response states that its core IT infrastructure remained secure, while suggesting a potential entry point through a third-party supplier, and the company has not confirmed customer data exposure.

The claimed data includes invoices, receipts, financial records, personal employee files, employment contracts, personnel records, and confidentiality agreements, with security experts emphasising 8Base’s focus on data extortion. According to GBHackers On Security, a substantiated breach could bring regulatory scrutiny under the EU GDPR and underscore the importance of robust third-party risk management.