Ferrari reports data breach with customers’ personal data

A hacker has stolen personal data such as names and addresses of Ferrari customers. The company says it is being extorted, but will not pay a ransom. According to the car manufacturer, the hackers did not steal any order information.

Personal data such as names, addresses, email addresses and telephone numbers were stolen in the attack, the company said in an email to customers. Payment details such as bank account numbers were not captured. The attackers also did not steal any order information. So, based on the captured data, they do not know, for example, who bought which Ferrari.

It is not clear whether the hacker stole other information, such as trade secrets. Ferrari only says that the hackers had access to “a limited number of systems.” The Italian car manufacturer was informed by the hackers about the attack, which included a ransom demand. Ferrari says it has a policy not to respond to this, ‘because hackers can continue with more hacks and it does not change the stolen data’.

The automaker says it is investigating the attack with external security researchers to prevent future attacks and says it has reported the leak to relevant authorities. The company says the attack has no further consequences for its business operations.