Italian luxury sports car maker Ferrari recently announced that a threat actor had demanded a ransom related to customer contact details that may have been exposed in a ransomware attack. The company stated that upon receiving the demand, they immediately began an investigation in collaboration with a global cybersecurity firm and have informed the relevant authorities. Ferrari also noted that they will not be held to ransom as this would fund criminal activity and enable threat actors to continue their attacks.
The company did not disclose when the incident occurred, but it could be connected to a ransomware attack back in October 2022 that Ferrari had denied at the time. While the breach has not impacted operational functions of the company, Ferrari has worked with third-party experts to increase security on its systems. The ransomware gang behind the attack has been associated with several other attacks, including Logistics giant Hellmann Worldwide, software and services firm Tyler Technologies, and others.
Overall, Ferrari has taken the necessary steps to inform their customers of the potential data exposure and to increase security on its systems. In addition, the company has made it clear that they will not give into the demands of the threat actor, as this would only fund criminal activity and allow the perpetrator to continue their attack.
Key Points:
- Ferrari recently announced that a threat actor had demanded a ransom related to customer contact details.
- The incident could be connected to a ransomware attack back in October 2022 that Ferrari had denied at the time.
- The attack has not impacted operational functions of the company, but Ferrari has worked with third-party experts to increase security on its systems.
- The ransomware gang behind the attack has been associated with several other attacks.
- Ferrari has taken the necessary steps to inform their customers of the potential data exposure and to increase security on its systems.
- The company has made it clear that they will not give into the demands of the threat actor.