Nissan Discloses Data Breach Linked to Compromised Red Hat Infrastructure
Nissan Motor Co., Ltd. has announced a data breach impacting approximately 21,000 customers of Nissan Fukuoka Sales Co., Ltd. The breach followed unauthorized access to a Red Hat-managed server used for the dealership's customer management system…
Nissan Motor Co., Ltd. has announced a data breach impacting approximately 21,000 customers of Nissan Fukuoka Sales Co., Ltd. The breach followed unauthorized access to a Red Hat-managed server used for the dealership's customer management system development.
Red Hat, responsible for developing Nissan's customer management infrastructure, identified the unauthorized access on Tue, Sep 26, 2025. The breach affected personal data of customers who purchased vehicles or received services at the former Fukuoka Nissan Motor dealership.
Upon detection, Red Hat eliminated unauthorized access and implemented measures to prevent future intrusions. Nissan was informed of the breach on Tue, Oct 3, 2025, and reported it to Japan's Personal Information Protection Commission. Affected customers are being contacted directly.
The exposed data included customer names, addresses, phone numbers, partial email addresses, and sales-related information. Importantly, credit card and other sensitive financial data were not compromised. Red Hat's servers did not store additional customer information beyond what was accessed, minimizing concerns of further data exposure.
has announced a data breach impacting approximately 21,000 customers of Nissan Fukuoka Sales Co., Ltd.
There is no evidence of the compromised data being used for secondary purposes or criminal activities. Nonetheless, Nissan advises customers to be cautious of suspicious communications, such as phishing calls and fraudulent messages.
The incident highlights vulnerabilities in third-party supply chains and contractor-managed infrastructure. Nissan has acknowledged the breach as a significant security lapse and is committed to enhancing subcontractor monitoring and overall information security protocols.
This breach underscores the risks associated with outsourcing sensitive customer data management. Companies using third-party developers must ensure robust security oversight to prevent similar incidents.
Nissan has expressed regret to affected customers for the inconvenience and concern caused by the data breach and is cooperating with regulatory authorities in the ongoing investigation.
Based on reporting by GBHackers.