Supply chain
β Supply Chain
Nissan North America Third-Party Breach (January 2023)
Primary Source βIncident Details
Nissan North America data breach caused by vendor-exposed database. Nissan North America has begun sending data breach notifications informing customers of a breach at a third-party service provider that exposed customer information. The security incident was reported to the Office of the Maine Attorney General on Monday, January 16, 2023, where Nissan disclosed that 17,998 customers were affected by the breach. In the notification sample, Nissan claims it received notice of a data breach from one of its software development vendors on June 21, 2022.
Technical Details
- Initial Attack Vector
- Compromise of third-party service provider / vendor relationship
- Vendor / Product
- Unknown
- Supply Chain Attack
- β Confirmed third-party / vendor compromise
Timeline
- 2023-01-01 Breach occurred
- 2023-01-17 Publicly disclosed