Automotive Titan Stellantis Discloses Data Breach

Stellantis has disclosed a data breach affecting a third-party service provider’s platform used in its North American operations. The company said it immediately activated incident response protocols, began a comprehensive investigation, and took action to contain and mitigate the situation. Contact information relating to its North American customers was compromised, and affected individuals are being directly notified.

The company stated that the affected platform does not store financial or sensitive personal information, and none was accessed. While Stellantis did not name the third-party platform, Piyush Sharma, the Tuskira CEO and co-founder, said that the extortion group ShinyHunters is believed to have hacked Stellantis’ Salesforce instance as part of a broader campaign.

Formed in 2021 through the merger of PSA Group and Fiat Chrysler Automobiles, Stellantis is the fifth-largest automaker globally, with operations in 130 countries and 14 car brands.