The Czech automaker has confirmed a breach in its online store following the exploitation of a vulnerability in the portal's software, which allowed attackers to temporarily access the system and view customer data. The incident affects only the store operated by the German importer and not Škoda's global systems or the Škoda Connect portal, which continue to operate normally.
The exposed information includes names, Addresses, emails, Phones, order details and access credentials, although passwords were stored as hashes and card or payment data would not have been compromised. The company admits that it cannot precisely determine how much data was copied or how many people were affected, but it has notified potentially impacted customers and the competent authorities.
Škoda closed the affected store, corrected the vulnerability and opened a forensic investigation to clarify the actual scope of the incident. The main risk now is phishing attempts, identity theft and unauthorized account access, so the company recommends that users be alert to suspicious emails and change passwords if they believe they may have been exposed.
Fountain: Bleeping Computer
Photo of Drazen Nesic in Pixnio