Third-party hack affirmed by Nissan after Everest ransomware assertions

Major Japanese multinational automaker Nissan has confirmed having its data compromised in a cyberattack against a third-party vendor earlier this year after the Everest ransomware operation alleged to have pilfered 910 GB of customer, dealership, and loan data from the file transfer system leveraged by North American Nissan and Infiniti dealerships, reports The Record, a news site by cybersecurity firm Recorded Future.

"We have found no indication that Nissan systems were compromised or that any Nissan customer information was accessed or put at risk. We are working closely with the vendor as it completes its investigation," said a Nissan spokesperson.

Everest, which claimed to have extorted Nissan since breaching its file transfer system in January, warned that it would publish the stolen data trove by Apr. 3. Such a development comes after a series of cyberattacks against Nissan over the past few years, including a 2024 intrusion that impacted nearly 100,000 of the automaker's customers and employees in Australia and New Zealand.