Volkswagen Group denies IT breach amid ransomware claims

Volkswagen Group has stated that its IT infrastructure remains unaffected following claims from the 8Base ransomware group, which alleged that it had stolen sensitive data from the automotive giant. The group, which owns luxury brands like Audi, Porsche, Lamborghini, and Skoda, is investigating the situation but has not confirmed any data breach.

The ransomware group 8Base claimed to have exfiltrated vast amounts of confidential information, including accounting documents, personal data, employment contracts, and personnel files. Despite the gang’s deadline for ransom payment has passed, none of the purportedly stolen files have been made public.

Volkswagen acknowledged awareness of the incident and emphasized actively monitoring the situation. A company spokesperson reiterated that the organization’s IT systems were not compromised but did not provide further details on the ongoing investigation.

8Base, which has been active since early 2023, is known for its double-extortion tactics, where sensitive data is stolen and used to pressure victims into paying a ransom. The group has targeted over 400 organizations since its emergence, yet the alleged breach of Volkswagen’s data remains unsubstantiated.

This marks the latest in a series of cyberattacks involving Volkswagen. Previously, the company was targeted by Chinese state-backed attackers between 2011 and 2014, underscoring the increasing vulnerability of automotive manufacturers to cyber threats.

The full extent of the breach remains uncertain, with Volkswagen maintaining that its systems are secure while the 8Base group has yet to release any stolen information.