Technology

Nissan says Red Hat breach affected thousands of customers

2025-12-23 16:10
967 views
Nissan says Red Hat breach affected thousands of customers

The September 2025 breach at Red Hat also exposed Nissan customer files -affecting around 21,000 people.

  1. Pro
  2. Security
Nissan says Red Hat breach affected thousands of customers News By Sead Fadilpašić published 23 December 2025

September 2025 breach at Red Hat exposed Nissan customer files as well

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

Nissan Titan (Image credit: Nissan) Share Share by:
  • Copy link
  • Facebook
  • X
  • Whatsapp
  • Reddit
  • Pinterest
  • Flipboard
  • Threads
Share this article 0 Join the conversation Follow us Add us as a preferred source on Google
  • Nissan confirms supply chain breach via Red Hat, exposing data of ~21,000 customers
  • Stolen info includes names, addresses, phone numbers, and partial emails; no financial data compromised
  • Crimson Collective blamed; ShinyHunters posted sample files on extortion platform

Japanese car giant Nissan has confirmed losing sensitive data on thousands of people as a result of a third-party supply chain attack.

In a press release, the company said the recent attack on Red Hat affected its customers, as well, as the latter was commissioned by Nissan to develop a customer management system for one of its sales companies - Nissan Fukuoka Sales Co.

In late September, Red Hat detected unauthorized access which, as was later determined, resulted in the theft of hundreds of gigabytes of sensitive data from 28,000 private GitLab repositories.

You may like
  • Red Hat Red Hat confirms major data breach after hackers claim mega haul
  • Renault Twingo EV Renault UK warns customers their info may have been hit in data breach - here's what we know
  • A digital themed isometric showing a neon padlock in the foreground, and a technological diagram of a processor logic board in the background. Hyundai IT services breach could put 2.7 million Hyundai, Kia owners in the US at risk

Crimson Collective and ShinyHunters

Red Hat ousted the attackers and notified Nissan in early October 2025, saying that approximately 21,000 customers, who have purchased vehicles or received services, have had addresses, names, telephone numbers, and parts of the email address compromised.

Customer-related information used in sales activities was also stolen, but credit card information and other banking data was not.

“We sincerely apologize for any inconvenience and concern this may have caused to our customers and related parties,” Nissan said in a machine-translated announcement, and stressed that it will reach out to affected individuals.

The crooks took everything they found on the compromised servers, Nissan further explained, emphasizing that there is “no risk of further data leakage.”

Are you a pro? Subscribe to our newsletterContact me with news and offers from other Future brandsReceive email from us on behalf of our trusted partners or sponsorsBy submitting your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

The company says that so far, there has been no evidence that the stolen files were misused in the wild but urged its customers to be wary of incoming emails or other communications, especially those pretending to come from the carmaker.

It did not name the attackers, but BleepingComputer claims it was done by a group called Crimson Collective. Soon after, the infamous ShinyHunters hosted a sample of the stolen files on their extortion platform, too.

Best antivirus software headerThe best antivirus for all budgetsOur top picks, based on real-world testing and comparisons

➡️ Read our full guide to the best antivirus1. Best overall:Bitdefender Total Security2. Best for families:Norton 360 with LifeLock3. Best for mobile:McAfee Mobile Security

Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds. Make sure to click the Follow button!

And of course you can also follow TechRadar on TikTok for news, reviews, unboxings in video form, and get regular updates from us on WhatsApp too.

Sead FadilpašićSocial Links Navigation

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Show More Comments

You must confirm your public display name before commenting

Please logout and then login again, you will then be prompted to enter your display name.

Logout Read more Renault Twingo EV Renault UK warns customers their info may have been hit in data breach - here's what we know    A digital themed isometric showing a neon padlock in the foreground, and a technological diagram of a processor logic board in the background. Hyundai IT services breach could put 2.7 million Hyundai, Kia owners in the US at risk    Person working with documents on desk, accountant checking company budget accounting documents, auditing financial statements, preparing company balance sheet financial statements. Audit concept. Nearly 180k records exposed in billing platform breach - here’s what we know    hacker hands at work with interface around Sensitive customer info exposed in Mango data breach - here's what we know    Password recovery concept image showing man typing on a keyboard with an overlay imitating password recovery and data recovery principles GlobalLogic says data on 10,000 workers exposed in Oracle-linked data breach    Code Skull Auto giant LKQ says it's the latest firm to be hit by Oracle EBS data breach    Latest in Security Christmas scams Phishing emails and fake adverts flood inboxes this Christmas - and they’re getting harder to detect than ever    NordProtect logo NordProtect adds fraud monitoring tool to help protect users from scams    Caution sign data unlocking hackers. Malicious software, virus and cybercrime, System warning hacked alert, cyberattack on online network, data breach, risk of website Ransomware attack on Romanian water agency hits over a thousand systems    Ransomware University of Phoenix data breach may have hit over 3.5 million victims - here's what we know    Pirate skull cyber attack digital technology flag cyber on on computer CPU in background. Darknet and cybercrime banner cyberattack and espionage concept illustration. HPE tells customers to patch OneView immediately as top-level security flaw spotted    Security padlock and circuit board to protect data Motherboards from Gigabyte, MSI, ASUS, ASRock at risk from new UEFI flaw attack - here's what we know    Latest in News Deadpool addresses the camera Marvel Rivals studio teases a big year ahead for the game — 'We're not going to slow down'    Corsair lighting enhancement kit Vengeance DDR5 shown in motherboard DDR5 RAM kit from Corsair was reportedly swapped for dummy RGB modules    Dyson Spot+Scrub Ai robot vacuum in tester's house Dyson Spot+Scrub Ai robot vacuum first impressions: redemption?    Surfshark Surfshark expands dedicated IP to Linux in its latest desktop update    Clair Obscur: Expedition 33 ‘It’s good to have limitations’: Clair Obscur: Expedition 33's creative director says Sandfall Interactive's next game won’t on a bigger scale despite huge success    The official logo for Marvel's Avengers: Doomsday movie written in gray and green text on a black background Avengers: Doomsday's first trailer is now online officially    LATEST ARTICLES