Škoda Reports Customer Data Breach After Online Shop Vulnerability Exploited
Summary
Škoda says attackers exploited an unspecified vulnerability in its online shop, accessing customer contact, order and password-hash data. Full card details were not stored there; the flaw was fixed and the incident referred for forensic analysis.
Key points
- Škoda says attackers exploited an unspecified vulnerability in its online shop, temporarily gaining unauthorized access.
- Accessed data included names, addresses, contact details, order information and email addresses with password hashes.
- Škoda said full credit card details were not stored on the compromised systems and could not be accessed there.
- The company fixed the vulnerability, reported the incident to the relevant authority and referred it for forensic analysis.
- Škoda said it has no evidence that the accessed credentials were misused, but warned customers about phishing and credential reuse risks.
- The number of affected customers was not disclosed.
Article Details
- Victim Organization
- Škoda Auto
- Incident Type
- Data breach involving unauthorized access to the online store after attackers exploited an unspecified software vulnerability
- Data Types Exposed
- Names
- Addresses
- Email addresses
- Phone numbers
- Order information
- Login credentials, including email addresses and cryptographic password hashes
- Affected Records
- Not disclosed
- Operational Impact
- Attackers temporarily gained unauthorized access to the online store system. Škoda said it fixed the vulnerability, reported the incident to the relevant authority, and referred it for forensic analysis. Full credit card details were not stored in the compromised system, and direct access to them was reportedly not possible.
- Ransom Or Extortion
- Not disclosed. The source says a spokesperson was asked whether Škoda had been contacted about paying a ransom, but reports no answer.
- Claim Status
- confirmed