Luxury car manufacturer Ferrari disclosed that it suffered a data breach following a ransom demand received after attackers gained access to some of its IT systems.
According to breach notification letters sent to customers, Ferrari stated that a threat actor was able to access a limited number of systems in their IT environment.
The Italian luxury sports car maker said the attackers gained access to its network and the attackers demanded a ransom not to leak data stolen from its systems. The company is yet to disclose if this was a ransomware attack or just an extortion attempt.
Ferrari N.V. announces that Ferrari S.p.A., its wholly-owned Italian subsidiary, was recently contacted by a threat actor with a ransom demand related to certain client contact details.
Upon receipt of the ransom demand, they immediately started an investigation in collaboration with a leading global third-party cybersecurity firm.
The customer information exposed in the incident includes names, addresses, email addresses, and telephone numbers.
Ferrari has not found any evidence that payment details, bank account numbers, or other sensitive payment information was accessed or stolen.
They have taken measures to secure the compromised systems and says the attack has had no impact on the company's operations.
The company added that as a policy, Ferrari will not be held to ransom as paying such demands funds criminal activity and enables threat actors to perpetuate their attacks.
