started · updated
Volkswagen dealership software breach exposes customer data in Germany
A major cyberattack on an IT service provider in the Würzburg region has compromised software used by car dealerships across Germany, exposing sensitive customer transaction data. The breach was facilitated by a serious security vulnerability in a third-party software package.
Stolen information includes order and invoice numbers, delivery dates, and financial details such as purchase prices, payment amounts, and financing information. This data enables criminals to conduct highly convincing fraud, such as sending fake payment requests or claiming changes to bank routing details.
While many dealerships are affected, the breach heavily impacts those selling Volkswagen Group brands. Volkswagen confirmed that its own Volkswagen Group Retail Deutschland division, which operates approximately 120 dealerships, uses the compromised software. The company has notified affected customers regarding the potential risks.
The Central Association of the German Automobile Trade (ZDK) has warned of the increasing professionalism of such crimes and has called on the Federal Criminal Police Office (BKA) to establish a dedicated task force to combat organized crime within the automotive trade.
Entities
Bundeskriminalamt · VW Group · Volkswagen · Volkswagen Group · Volkswagen Group Retail Deutschland · Würzburg · Zentralverband Deutsches Kraftfahrzeuggewerbe
Claims
What the coverage asserts, and how many sources carry each claim.
- [○ 1 SOURCE] The ZDK has called on the Federal Criminal Police Office (BKA) to establish a task force for organized crime in the car trade. www.deutsche-handwerks-zeitung.de
- [● 8 SOURCES] The breach was facilitated by a serious security vulnerability in a third-party software package. world-today-journal.com · www.focus.de · www.leadersnet.de · www.hna.de · www.it-daily.net · +3 more
- [● 6 SOURCES] Volkswagen Group Retail Deutschland operates approximately 120 dealerships in Germany. www.focus.de · www.t-online.de · www.hna.de · www.it-daily.net · www.onetz.de · +1 more
- [● 8 SOURCES] Volkswagen confirmed the compromised software is used by its Volkswagen Group Retail Deutschland division. world-today-journal.com · www.focus.de · www.t-online.de · www.hna.de · www.it-daily.net · +3 more
- [● 9 SOURCES] Stolen data includes order and invoice numbers, delivery dates, and financial details like purchase and financing amounts. world-today-journal.com · www.focus.de · www.t-online.de · www.leadersnet.de · www.hna.de · +4 more
- [● 9 SOURCES] A cyberattack targeted an IT infrastructure provider in the Würzburg region. world-today-journal.com · www.focus.de · www.t-online.de · www.leadersnet.de · www.hna.de · +4 more