Ferrari Cyber Attack Just Happened

Even if they pay the demand, no guarantee they get their data back.


Sent from my iPhone using FerrariChat

 

In the specific instances I've seen, they do get their data back every time, but I know there are some reports claiming that the data recovery rate is far lower.

It's definitely in the hackers' best interest, by far, to give them their data back, simply because other targets will be far less likely to pay if word gets around they won't get their data back even after paying.

 

Encryption is more of an issue for organisations having "real time" operation (e.g. hospitals), others are for the most part protected by data backups. So the threat to disclose information is a better leverage, although there can be no guarantee in case of ransom payment... data leaks happen from time to time, the hackers- apart from the ransom - also try to resell it to whoever wants to pay something. If no ransom is paid they publish some partial data to make a statement, but still try to resell the data.

 

According to Ferrari, this is unrelated to the incident that occurred 6 months ago : the attack in autumn didn't concerned clients datas, but project datas (like new cars to come).
I've got a confirmation only name, surnames, email adresses and postal adresses of clients leaked, no payement or car datas.
And that Ferrari won't pay any ransom.

 

Love how they pretend that they're taking the highroad and a bold stance w/ respect to not paying ransom, when in reality they're shrugging their shoulders and saying - not our problem..

 

I'm sorry but I don't buy that it is "unrelated" at all. We just have to take their word for it but it certainly sounds fishy. I bet you it was the exact same bad actors that did the attack 6 months prior. They probably learned enough about their systems to be able to launch another attack.

What is worse ? That Ferrari where in complete denial about having a major security issue and didn't do enough about it to prevent further attacks (despite the reputational damage and subsequent customer data leakage)...

*Or*

...That they are lying to us about when and what was leaked in the first place ? Both situation seem pretty bad.






Sent from my CPH2145 using Tapatalk