Nissan Confirms Data Breach Following Unauthorized Access to Red Hat Servers

Nissan Motor Corporation has confirmed a data breach resulting from unauthorized access to Red Hat servers managed by a third-party contractor responsible for developing a customer management system. This incident has affected personal information for approximately 21,000 customers of Nissan Fukuoka Sales Co., Ltd.

The unauthorized access was detected by Red Hat on September 26, 2025. Consequently, Nissan revoked the attacker's access and implemented countermeasures to prevent further intrusions. The breach notification to Nissan occurred a week later, on October 3, 2025, prompting the company to report the incident to the Personal Information Protection Commission.

The compromised data includes customer names, addresses, telephone numbers, and partial email addresses. It is important to note that credit card information or payment details were not included, which limits the risk of financial fraud.

The affected individuals are customers who purchased vehicles or received services at the previously named Fukuoka Nissan Motor Co., Ltd., now known as Nissan Fukuoka Sales Co., Ltd. Nissan has committed to individually notifying affected customers and providing guidance on protective measures. Currently, there is no evidence suggesting that the compromised data has been misused or sold on underground markets.

As a precaution, Nissan advises customers to remain cautious about suspicious communications, including deceptive phone calls or fraudulent correspondence. The company confirmed that no additional customer data is stored on the Red Hat server environment, mitigating concerns regarding further breaches from the same infrastructure.

In response to the incident, Nissan plans to strengthen oversight of contractors and enhance information security protocols across its operations. The company has extended apologies to affected customers and business partners.

Based on reporting by Cyber Security News.