Supply chain β›“ Supply Chain

Nissan North America Third-Party Breach (January 2023)

πŸ“… 2023-01-01 🏒 Unknown
Primary Source β†—

Incident Details

Nissan North America data breach caused by vendor-exposed database. Nissan North America has begun sending data breach notifications informing customers of a breach at a third-party service provider that exposed customer information. The security incident was reported to the Office of the Maine Attorney General on Monday, January 16, 2023, where Nissan disclosed that 17,998 customers were affected by the breach. In the notification sample, Nissan claims it received notice of a data breach from one of its software development vendors on June 21, 2022.

Technical Details

Initial Attack Vector
Compromise of third-party service provider / vendor relationship
Vendor / Product
Unknown
Supply Chain Attack
βœ… Confirmed third-party / vendor compromise

Timeline

  1. 2023-01-01 Breach occurred
  2. 2023-01-17 Publicly disclosed