Automotive company Stellantis has confirmed that some of its North American customers' data was stolen during a recent cyberattack. The breach occurred through a third-party service provider's platform that supports the company's customer service operations.
According to a statement from Stellantis, the attackers only managed to steal customer contact information. The compromised platform did not store financial or other sensitive personal data.
Stellantis, which owns major brands like Jeep, Chrysler, and Dodge, stated that it immediately launched an investigation and took action to contain the situation. The company is in the process of notifying both the authorities and the affected customers.
While Stellantis did not name the third-party provider, researchers reported that the attack is part of a series of Salesforce data breaches and has been linked to the ShinyHunters extortion group. The group has since claimed responsibility, stating that they stole over 18 million customer records, including names and contact details, from Stellantis's Salesforce account.
A Growing Threat
ShinyHunters has been targeting Salesforce customers throughout the year using voice phishing attacks. The group claims to have stolen information from numerous high-profile companies, including Google, Cisco, Qantas, and Adidas.
The FBI has also issued an alert about this type of attack, warning that hackers are breaching organizations' Salesforce environments to steal data and extort victims. The ShinyHunters group claims to have stolen over 1.5 billion Salesforce records from 760 companies.
Stellantis is advising its customers to be cautious of potential phishing attempts and to avoid clicking on suspicious links or sharing personal information in unexpected emails, texts, or calls.
Found this article interesting? Follow us on X(Twitter) ,Threads and FaceBook to read more exclusive content we post.
