[ad_1]
Customers who had their information compromised in the Nissan Australia cyberattack in December 2023 have been subject to a second cyber-incident via a third-party call centre.
Nissan Australia’s third-party call centre has suffered a data breach, just months after customer information was stolen in a major cyber attack.
The company – tasked with helping Nissan following the first hack – has now had its own systems compromised.
According to information posted on its website on 21 May 2024, Nissan had outsourced the task of creating an external call centre dedicated to help manage customer enquiries to a company called OracleCMS in the wake of the first hacking event, which occurred in December 2023.
On 15 April 2024, OracleCMS became aware that its systems had been breached in a separate cyberattack – with Nissan notified three days later.
Nissan had provided OracleCMS “summary information to help answer questions from people who received a breach notification letter from us,” with that information being stolen from OracleCMS systems and published on the dark web on 12 April 2024.
In a letter sent to affected customers in recent days, personal information obtained by hackers is said to have included birthdates, contact details, and “a description of the personal information compromised in the [December] Nissan data breach”.
In a statement released in March 2024, Nissan estimated the personal data of up to 100,000 Australian customers had been accessed in the December incident.
MORE: Up to 100,000 Australian customers affected by Nissan cyberattack
Nissan says it is in contact with the Australian Cyber Security Centre, the Office of the Australian Information Commissioner, and the Cyber Security Response Coordination Unit in relation to the latest incident – as well as the Office of the Privacy Commissioner in New Zealand.
“We understand this news will be especially disappointing given you have already had your information compromised,” Nissan wrote in a letter to customers impacted by the events.
“We sincerely apologise for any upset this notice may cause and invite you to contact us if you are unsure about the support services available to you.”
Affected customers in Australia have access to services provided by IDCARE and Equifax at no cost, with Nissan reimbursing any costs in replacing compromised identification documents.
“We apologise for any concern caused by this incident, and reiterate our determination to support all those impacted in line with both our obligations, and those of our partners,” a statement on OracleCMS’s website reads.
For more information, Nissan Australia customers can call 1800 958 000 between 7am and 7pm AEST on weekdays.
The post Nissan Australia subjected to a second cyber incident via external call centre appeared first on Drive.
[ad_2]
Source link
