Tesla confirms “insider wrongdoing” was the cause of May data breach

Tesla confirms “insider wrongdoing” was the cause of May data breach

Tesla’s massive data breach impacted the personal information of over 75,000 and was a result of an “insider wrongdoing,” according to a data breach notice posted by the office of the Maine Attorney General.

The incident came to light in May 2023 when a German media resource Handelsblatt reported that a Tesla employee stole about 100GB of data from the automaker, including the sensitive information related to 100,000 names of past and present employees including the social security number of Tesla CEO Elon Musk and thousands of customer complaints about their cars like braking and acceleration issues.

In a notice to staff, Tesla said that it was informed of the breach on May 10. A further investigation revealed, “that two former Tesla employees misappropriated the information in violation of Tesla’s IT security and data protection policies and shared it with the media outlet.”

The impacted data included names and certain contact information such as address, phone number, and/or email address of current and former employees.

The company said it filed lawsuits against the culprits behind the breach, which resulted in the seizure of electronic devices that were believed to have contained the Tesla information. The automaker also obtained court orders that prohibit the former employees from further use, access, or dissemination of the data, subject to criminal penalties.

Earlier this month, a team of students at the Technical University of Berlin found a way to unlock premium Tesla features behind a paywall, including Full Self-Driving (FSD) and heated rear seats.

Back to the list

Latest Posts

AI chatbots fall for phishing scams

AI chatbots fall for phishing scams

The models provided the correct URL only 66% of the time; nearly 30% of responses pointed users to dead or suspended domains.
3 July 2025
Chinese hackers exploited Ivanti flaws in attacks against French government

Chinese hackers exploited Ivanti flaws in attacks against French government

ANSSI believes that the Houken campaign is operated by ‘UNC5174’, an entity believed to act as an initial access broker for China’s Ministry of State Security.
2 July 2025
Threat actors exploit Vercel's AI tool v0 to build sophisticated phishing pages

Threat actors exploit Vercel's AI tool v0 to build sophisticated phishing pages

The malicious actors used v0.dev to create fake login pages mimicking legitimate brands.
2 July 2025