Data Breach Alert: Stellantis Confirms Third-Party Service Exposed Customer Information Here's What Was Compromised

(MENAFN- Live Mint) Stellantis has reported a data breach involving a third-party service provider that supports its North American customer service operations on Sunday. The company said the unauthorised access, currently under investigation, exposed only basic contact information and did not compromise financial details or sensitive personal data.

Company response and customer advisory

The Chrysler parent confirmed it has activated its incident response protocols, notified authorities and is directly informing affected customers. It also urged customers to be alert to potential phishing attempts. However, Stellantis has not disclosed how many individuals were affected.

"Upon discovery, we immediately activated our incident response protocols and are directly informing affected customers," the automaker said in the statement.

Jaguar Land Rover operations severely hit

The incident adds to a string of recent cyberattacks targeting global automakers. Earlier in September, Jaguar Land Rover said its retail and production operations had been“severely disrupted” by a cybersecurity breach, forcing it to keep factories closed until 24 September.

The British carmaker said that the production at its UK plants will remain suspended until 24 September, prolonging a halt that has already lasted more than three weeks following a cyber attack. Owned by India's Tata Motors, the company took its systems offline in early September to contain the breach, which has caused major disruption to both its manufacturing lines and retail operations.

Also Read | Stellantis' policy is that we don't build plants around policies alone: India MD Also Read | VW, Stellantis Are Biggest Winners From EU Relaxing CO2 Rules

Moreover, the automaker confirmed on Tuesday that its three UK factories, which normally turn out around 1,000 vehicles daily, will not resume work before 24 September. Thousands of its 33,000-strong workforce have been asked to stay at home during the shutdown.

“We have taken this step as our forensic investigation into the cyber incident continues, and while we plan for a phased and controlled restart of our global operations,” the company said in a statement published on its website.

It is noteworthy that growing reliance on digital platforms and external providers is increasing the sector's exposure to cyber threats that risk disrupting operations and compromising customer data.

(With inputs from Reuters)

MENAFN21092025007365015876ID1110091354