Tokyo — Japanese automaker Nissan Motor Co. has disclosed that it was specifically targeted in a cyberattack that may have exposed sensitive personal information belonging to current and former employees, following a security incident involving Oracle’s systems.
According to Nissan Americas, the company was notified by Oracle of “a cyber event” affecting the personnel records of hundreds of organizations that use Oracle’s services. Subsequent investigations revealed that Nissan had been specifically targeted during the incident.
In a notification sent to affected current and former employees, the automaker said it believes unauthorized actors may have accessed a wide range of sensitive personal information. The potentially compromised data includes contact information, banking details, Social Security numbers, Social Insurance numbers and other national identification numbers, financial and tax records, as well as dependent and beneficiary information.
The company has not disclosed the number of individuals affected or whether the stolen data has been misused. There has also been no public attribution of the attack to any known cybercriminal group.
Following the discovery of the breach, Nissan said it immediately activated its incident response plan, engaged external cybersecurity specialists to investigate the incident, and has been working closely with Oracle to determine the scope and impact of the attack. The company also said it has notified law enforcement authorities and is continuing to monitor the situation.
The incident highlights the growing cybersecurity risks associated with third-party service providers, as organizations increasingly rely on cloud-based platforms to manage employee and enterprise data. Attacks targeting software vendors and service providers can have far-reaching consequences, potentially exposing sensitive information belonging to numerous customer organizations through a single compromise.
Nissan has advised affected individuals to remain vigilant for signs of identity theft or financial fraud and to monitor their financial accounts and credit reports for any suspicious activity.
The investigation into the cyberattack remains ongoing, and Nissan said it will provide additional updates as more information becomes available.
About The Author
