Nissan North America data breach impacts over 53,000 employees

Nissan North America discovered on November 7, 2023 that a threat actor targeted its external VPN, shut down certain systems and demanded a ransom; while systems were not encrypted, investigation revealed the attacker accessed files containing business data and personal information — including Social Security numbers — for more than 53,000 current and former employees. Nissan notified law enforcement and affected individuals, offered 24 months of Experian credit monitoring, and worked with external cybersecurity experts to contain and terminate the threat; the report also notes several prior Nissan security incidents.