Everest Claims 910GB Nissan Data Exfiltration Through Third-Party Contractor
Summary
The Everest extortion group claims it accessed Nissan and Infiniti North American dealer systems through a third-party IT contractor and exfiltrated 910 GB of data. The alleged access and exposure details are unverified.
Key points
- Everest claims it accessed Nissan and Infiniti dealer network systems in North America through a third-party IT contractor.
- The group claims to have exfiltrated 910 GB across more than 180,000 files, reportedly spanning 2013 to January 2026.
- The claimed targets include GCSSD applications and FTP servers.
- Everest attributes the alleged access to exposed, unrotated credentials and a lack of multi-factor authentication on vendor infrastructure.
- The group claims the data includes customer and dealer records, loan and repair histories, VINs, geolocation, source code, private keys, and financial information.
- Everest’s published negotiation logs reportedly allege Nissan knew of the incident by January 15, 2026; the article provides no independent confirmation of the claims.
Article Details
- Victim
- Nissan Motor Corporation
- Victim Domain
- Not disclosed
- Encryption Status
- Unknown; the article does not report whether data or systems were encrypted.
- Encrypted Size
- Unknown
- Exfiltration Status
- Everest claims exfiltration; the claim is not independently confirmed in the article.
- Exfiltrated Data
- Everest allegedly claims the data includes customer contact details, auto loan and repair records, VINs, geolocation, dealer employee records, dealer source code and private encryption keys, licensed Experian and InfoUSA consumer data, invoices, business plans, and financial reports.
- Exfiltrated Size
- Everest claims 910 GB across more than 180,000 files.
- Ransom Demand
- Not disclosed
- Leak Status
- Everest reportedly published negotiation logs. Publication of the allegedly exfiltrated data is not reported.