The end of the ultimatum was set for January 6. And if the ransom is not paid, then the Cicada 3301 hacker group will carry out its threat: disclose the 40 gigabytes of data it says it stole from the official Peugeot dealership website.
“This data includes potentially sensitive information on customers, stocks of new and used vehicles, as well as details on maintenance services,” indicates the specialized site Zataz, which adds that it “was able to observe, in the information disseminated by pirates (VIN code of vehicles, license plate, scanning of identity documents), that the documents are largely geolocated in the Lot-et-Garonne region. » According to this same source, “the attack on Peugeot marks their first foray into the French automobile sector. »
“An isolated case”
Asked why the department was particularly targeted, a cybercrime expert recalls that “hackers first look for vulnerabilities and then see if the sensitive data can be exploited. » In the department, no information seems to have been passed on to the agents of the brand, targeted for its financial strength.
The hackers demand the payment of a ransom not to disclose these various elements, which will probably be resold on the dark web to equally ill-intentioned groups or people. By revealing that it had attacked the automobile giant, Cicada 3301, a young group of pirates formed around ten years ago, has already contributed to its notoriety. And the first broadcast of part of the stolen files showed that this claim was not a bluff.
When contacted, the communications department of the Stellantis group simply indicated: “This is an isolated case. A dealership was affected. The latter alerted the CNIL and its clients. »
