Volkswagen Data Breach: 3.3 Million Drivers Affected

Volkswagen Data Breach Exposes Customer Information

Volkswagen has reported a data security incident impacting over 3.3 million customers. The exposure occurred due to unsecured customer data left accessible online.

Details of the Data Exposure

The breach stemmed from a vendor utilized by Volkswagen, Audi, and authorized dealerships throughout the U.S. and Canada. A significant cache of customer data remained unprotected on the internet for a period of two years.

This vulnerability existed between August 2019 and May 2021, affecting data collected between 2014 and 2019. The compromised information was originally gathered for sales and marketing purposes.

Types of Information Compromised

The exposed data included personally identifiable information (PII) of both current customers and prospective buyers. This encompassed names, postal addresses, email addresses, and phone numbers.

A more critical subset of the data, affecting over 90,000 individuals in the U.S. and Canada, contained sensitive financial details. This primarily consisted of driver’s license numbers.

Furthermore, a smaller portion of records also revealed customers’ dates of birth and Social Security numbers.

Volkswagen’s Response

Volkswagen declined to publicly identify the vendor responsible for the data security lapse. The company has notified relevant authorities, including law enforcement and regulatory bodies.

External cybersecurity specialists and the vendor itself are currently collaborating with Volkswagen to fully evaluate the scope of the incident and implement appropriate remediation measures, as stated by a company spokesperson.

Broader Trend of Data Breaches

This incident is part of a growing pattern of security breaches involving driver’s license numbers. Earlier this year, insurance companies Metromile and Geico acknowledged that their quote forms were exploited by scammers seeking this information.

Several other automotive insurance providers have also reported similar incidents of driver’s license number theft. Geico suspects these thefts were linked to fraudulent unemployment benefit claims.

Uncertainty Regarding Data Misuse

Currently, Volkswagen has not confirmed whether the data exposed by the vendor has been subject to misuse. Investigations are ongoing to determine if any malicious activity occurred as a result of the breach.

The company continues to assess the situation and will provide further updates as they become available.