News

Hacker claims to sell 1.3 million Hyundai Russia customer records

This week a hacker put up records of 1.3 million Hyundai customers based in Russia for sale on a forum.

The records expose extensive customer information including vehicle information (such as VIN), email and contact information, address, date of birth, marital status, etc.

1.3 million records put up for sale on hacker forum

This week, a hacker claims to be selling data of 1.3 million Hyundai Russia customer records on a forum.

The finding was brought to my attention by threat intelligence analyst Bank Security.

As observed by Security Report, the sample data set shared by the user indicates multiple databases may be included as a part of the sale.

Forum post shares samples of data belonging to Russian Hyundai customers

Sample exposes customers’ vehicle and personal information

The sample data set posted by the seller shows vehicle information (such as VIN, car make/model, year, etc.) and links this information to the customer’s personal information via a numeric ID.

Sample JSON data exposes sensitive customer information linked to Hyundai vehicles

By researching some of the email addresses present in the leaked data sample, Security Report observed some of the leaked data in the sample represented Hyundai’s Russian dealerships (not necessarily customers), but the authenticity of the overall data could not be verified at this time.

Security Report reached out to Hyundai’s global media contacts for comment but we have not heard back.

Ax Sharma

Ax Sharma is a Security Researcher and Tech Reporter. His works and expert analyses have frequently been featured by leading media outlets including the BBC, Business Insider, Fortune, TechCrunch, TechRepublic, The Register, WIRED, among others. Ax's expertise lies in vulnerability research, malware analysis and reverse engineering, open source software and scams investigations. He's an active community member of British Association of Journalists (BAJ) and Canadian Association of Journalists (CAJ).

Recent Posts

Sea Turtle Cyber Espionage Campaign Targets Telecommunication and IT Companies in the Netherlands

Telecommunication, media, internet service providers (ISPs), information technology (IT)-service providers, and Kurdish websites in the…

4 months ago

Rogue WordPress plugin: Threat hunters uncover credit card skimming campaign targeting e-commerce sites

Rogue WordPress Plugin Found to Steal Credit Card Information in Magecart Campaign Threat hunters have…

4 months ago

Albanian Parliament and telco ‘One Albania’ suffer cyber attacks

The Assembly of the Republic of Albania and telecom company One Albania have recently fallen…

4 months ago

Carbanak Banking Malware Resurfaces with Updated Tactics in Ransomware Attacks

The banking malware Carbanak has resurfaced with updated tactics, incorporating attack vendors and techniques to…

4 months ago

Theme park giant Parques Reunidos hit by a ransomware cyber attack

One of the world's largest theme park operators, Parques Reunidos has disclosed a cybersecurity incident.…

1 year ago

Phishing kit screenshots your email domain on the fly to appear real

Phishing kit used by multiple hacked sites generates a log in page on the fly…

1 year ago

This website uses cookies.