News

Renault and Dacia Suffer User Data Leak

Customers of Renault and Dacia in the United Kingdom have been notified that their personal information has been compromised following a data breach at a third-party contractor.

The French automaker—whose Dacia brand operates as a subsidiary—employs over 170,000 people and produces around 2.2 million vehicles annually. According to the company, the incident affected only customers of its UK operations. Renault emphasized that its own systems were not breached, and the issue originated from an external partner.

“We regret to inform you that one of our partners has been subjected to a cyberattack, as a result of which personal data of some Renault UK customers was stolen from their system,” the company said in a notice to affected users.

What Data Was Exposed

The compromised information reportedly includes:

Full name
Gender
Phone number
Email address
Postal address
Vehicle VIN code
License plate number

While no banking or financial data was exposed, this combination of personal and vehicle information could be exploited in phishing, fraud, or social engineering campaigns.

Company and Regulatory Response

Renault stated that the affected contractor has contained the breach and removed the threat from its systems. The company has also notified UK regulators, including the Information Commissioner’s Office (ICO), about the incident.

Customers have been urged to remain cautious, avoid responding to suspicious emails or calls, and never share passwords or sensitive information with unverified sources.

Summary

Although Renault’s internal systems remain secure, the incident highlights the ongoing risk posed by third-party vendors in the automotive supply chain. As automakers increasingly rely on digital platforms for customer engagement and service management, ensuring the security of partner ecosystems remains as vital as protecting core IT infrastructure.

FBI Seizes Another BreachForums Domain; Hackers Admit the “Era of Forums Is Over”

The FBI has seized another version of the notorious hacker forum BreachForums, taking control of the domain BreachForums[.]hn a site used to leak data from at least 39 organizations affected by the recent Salesforce-related breaches. According to threat actors behind the forum, law enforcement not only took the site

Forensics Tool Velociraptor Used to Deploy LockBit and Babuk Ransomware

Cisco Talos researchers have warned that Velociraptor, a legitimate digital forensics and incident response (DFIR) tool, is being repurposed by LockBit and Babuk ransomware operators to deploy malware and maintain persistence in compromised networks. Velociraptor is an open-source DFIR utility originally developed by security researcher Mike Cohen and later acquired

Anthropic Finds That Just 250 Malicious Documents Can Poison a Large Language Model

Researchers at Anthropic, working with the UK government’s AI Safety Institute, the Alan Turing Institute, and several academic partners, have demonstrated that as few as 250 maliciously crafted documents are enough to poison a large language model (LLM) — causing it to produce incoherent text whenever it encounters a specific

What Data Was Exposed

Company and Regulatory Response

Summary

Read next