Škoda Security Incident Exposes Customers Data From Online Shop

Škoda Auto discovered and contained an intrusion into its online shop after attackers exploited a flaw in the shop’s standard third-party software; customer personal data (names, addresses, emails, phones, order history, and hashed login credentials) was potentially accessible during the incident, credit card data was not stored in the system, and definitive evidence of exfiltration could not be established due to limited server-side logging—Škoda remediated the vulnerability, engaged external forensics, notified authorities, and is informing potentially affected customers.