21 August 2023

Tesla confirms “insider wrongdoing” was the cause of May data breach


Tesla confirms “insider wrongdoing” was the cause of May data breach

Tesla’s massive data breach impacted the personal information of over 75,000 and was a result of an “insider wrongdoing,” according to a data breach notice posted by the office of the Maine Attorney General.

The incident came to light in May 2023 when a German media resource Handelsblatt reported that a Tesla employee stole about 100GB of data from the automaker, including the sensitive information related to 100,000 names of past and present employees including the social security number of Tesla CEO Elon Musk and thousands of customer complaints about their cars like braking and acceleration issues.

In a notice to staff, Tesla said that it was informed of the breach on May 10. A further investigation revealed, “that two former Tesla employees misappropriated the information in violation of Tesla’s IT security and data protection policies and shared it with the media outlet.”

The impacted data included names and certain contact information such as address, phone number, and/or email address of current and former employees.

The company said it filed lawsuits against the culprits behind the breach, which resulted in the seizure of electronic devices that were believed to have contained the Tesla information. The automaker also obtained court orders that prohibit the former employees from further use, access, or dissemination of the data, subject to criminal penalties.

Earlier this month, a team of students at the Technical University of Berlin found a way to unlock premium Tesla features behind a paywall, including Full Self-Driving (FSD) and heated rear seats.

Back to the list

Latest Posts

Iranian hackers target critical infrastructure, selling network access data on cybercriminal forums

Iranian hackers target critical infrastructure, selling network access data on cybercriminal forums

The advisory details tactics and techniques used by Iranian hackers to breach networks and collect valuable data.
17 October 2024
US authorities charge Sudanese brothers linked to Anonymous Sudan DDoS operation

US authorities charge Sudanese brothers linked to Anonymous Sudan DDoS operation

Anonymous Sudan carried out numerous DDoS attacks targeting US and international organizations.
17 October 2024
Nation-state hackers increasingly collaborate with cybercrooks to gather intelligence

Nation-state hackers increasingly collaborate with cybercrooks to gather intelligence

Russian state-backed hackers have been outsourcing cyberespionage tasks to cybercriminals, particularly those targeting Ukraine.
16 October 2024