Volkswagen data leak: Movements of 800,000 EV owners exposed
What's the story
In a major incident, the Volkswagen Group has suffered a massive data breach, one that has affected as many as 800,000 electric vehicle (EV) owners, according to German publication Spiegel. The leaked data contained sensitive information like GPS coordinates and battery charge levels. It impacts fully electric models across Audi, Volkswagen, SEAT, and SKODA brands in Germany and other parts of Europe.
Information exposure
Detailed location information revealed
The data leak not just exposed general vehicle status details but also made it possible to identify individual vehicles and their owners. In roughly 466,000 of the 800,000 cases, the location data was so accurate that it could be used to map out the daily routine of each owner. This breach has raised major privacy concerns as it has also exposed the movements of German politicians, entrepreneurs, police officers, and even suspected intelligence service employees.
Origin
Data breach traced back to Cariad
The data breach was traced back to a software error at Cariad, a Volkswagen Group company specializing in software. The issue was discovered by an anonymous whistleblower who used freely available software to uncover the sensitive information. Upon discovery, Europe's largest hacker association, Chaos Computer Club (CCC), was alerted and promptly took action by contacting Lower Saxony's State Data Protection Officer and other security bodies.
Company response
Cariad responds to allegations
In response to the allegations, Cariad's technical team acted swiftly and responsibly to block unauthorized access to customer data. The company issued a statement to Spiegel assuring customers that no sensitive information such as passwords or payment details were exposed in the breach. However, concerns remain about how easily this data could have been misused by criminals, fraudsters, blackmailers or stalkers.
Political reaction
German politicians react to the leak
The data breach has triggered reactions from German politicians, some of whom were among those affected. One politician called her leaked data "shocking," while another termed the incident "annoying and embarrassing." Both urged local automakers to improve their cybersecurity measures significantly in the wake of this incident. It highlights the increasing need for better data security in the automotive industry.