[Discussion] Volkswagen Leak Exposes 800K EVs to Location Tracking Risk

[Uncrowned Guard]

Volkswagen Data Breach: Exposing Confidential Details of EV Vehicles

In a recent cybersecurity incident, location data of about 800,000 electric vehicles from Volkswagen were accessible on the internet due to a data leak. The report originated from Der Spiegel, a leading German news magazine revealing the breach aftermath which witnessed the potential compromise of the drivers' information exposing the exact tracking of their movements.

Discovery: Software Vulnerability and the Whistleblower

The long-standing leakage problem allegedly sourced from the software incorporated in Volkswagen vehicles that could have paved the way for any potential adversary to track a driver's precise movements, Electrek reported. An unnamed whistleblower was instrumental in unveiling this vulnerability to Der Spiegel and the European hacking organization Chaos Computer Club. Furthermore, the issue seems to have also impacted other globally recognized Volkswagen-owned brands including Audi, Seat, and Skoda.

Inside the Breach: The Role of Cariad

An investigation by Der Spiegel indicated that Cariad, Volkswagen's software-developing subsidiary, had inadvertently made it possible for potential cyber criminals to find and access driver's data stored within Amazon's cloud service. The information at risk included specific details of when the electric cars were in use, and in certain instances, included the emails, telephone numbers, and addresses of drivers.

The breach specificity shines a spotlight, shockingly finding the locations of nearly 460,000 vehicles to an alarming accuracy “within ten centimeters” for Volkswagen and Seats vehicles and within a radius of 10km (approximately 6 miles) for Audi and Skoda models.

Aftermath: Security Amendments and Customer Assurances

After the distressing exposure, Cariad promptly addressed the issue and reassured their customers in a statement relayed to Der Spiegel that they did not need to take any action. They clarified that no sensitive information like passwords or payment data had been affected.

The data leak underscores ongoing concerns about the vast amount of information amassed by contemporary vehicles, that has often been flagged as a "privacy nightmare." All instances like this continually thrust privacy and data protection into sharp focus.

View full article