Ransomware group 8Base has claimed responsibility for an attack on Volkswagen Group in which it claims to have stolen sensitive data.

Data stolen in the attack allegedly includes invoices, receipts, accounting documents, personal employee files, employment contracts, certificates, personnel records, and numerous confidentiality agreements.

According to 8Base, the attack took place in September 2024, meaning the group has been sitting on a batch of data for more than a year.

Volkswagen has confirmed that a security “incident” occurred, but has so far been tight-lipped on the scope of the incident and whether data has been stolen.

In a statement given to Cybersecurity News , the car manufacturer said there has been no impact on its IT systems, possibly indicating the compromise oc

See Full Page