Ferrari cyberattack exposes customer data
Italian luxury sports car maker Ferrari was hit with a ransomware attack that exposed customers’ personal information.
It’s not clear when Ferrari’s Italian subsidiary was contacted by a hacker or group with a ransom demand related to the exposure of customer information nor did Ferrari disclose the ransom amount.
Ferrari said it is investigating the breach with an unnamed “leading global third-party cybersecurity firm” and has informed law enforcement authorities.
Ferrari’s policy is not to pay ransom demands to hackers because the company thinks it will perpetuate cyberattacks.
While many companies will pay white hat hackers to find vulnerabilities, the auto industry pays among the least for discovering potential breaches, according to research by San Francisco’s HackerOne. It operates bug bounty programs for BMW, Ford, Rivian and Toyota.
“Instead, we believed the best course of action was to inform our clients and thus we have notified our customers of the potential data exposure and the nature of the incident,” Ferrari said in a statement. “We can also confirm the breach has had no impact on the operational functions of our company.”