The Storm ransomware group continues to cut a swathe through Australian car dealerships and suppliers in the trucking, farm machinery, and auto sectors.
The hacking group’s latest victim is Victoria-based Penfold Motors, which was listed by the hackers on 17 August.
You’re out of free articles for this month
Initial attribution of the attack was complicated by an early case of mistaken identity, however, with Storm erroneously referring to their own victim as an organisation with a similar name in the United Kingdom.
The hackers did eventually update their leak post, and the data shared as evidence of the hack clearly belongs to Penfold Motors. Data published so far includes staff efficiency reports, customer details, vehicle identification numbers, and tax invoices.
Penfold Motors disclosed on 7 September that it was responding to a cyber attack and was in the process of contacting impacted individuals.
“Penfold Motors is investigating a contained cyber incident involving an external software provider. This incident resulted in an unauthorised party gaining access to some of Penfold Motors’ data which was stored in the software provider’s system,” the dealership said.
“As soon as we became aware of this incident, we activated our incident response plan and took precautionary steps to protect our environment. Our systems have been safely restored, and our dealerships are operating as usual.
“Penfold Motors is continuing to investigate this incident with the provider and external forensic and cyber security experts. This investigation includes assessing online claims made by an unknown party that they hold information belonging to Penfold Motors.”
Penfold is one of several Australian auto dealers responding to incidents impacting third-party suppliers in recent weeks.
According to the company, the data impacted was “limited to basic contact details and vehicle and servicing information”.
“There is currently no evidence that identity documents, bank account information, or other high-risk personal information have been impacted,” Penfold said.
“We have notified individuals whose information may have been involved.”
The company has established dedicated support lines if customers have any questions, and has informed the Australian Cyber Security Centre and the Office of the Australian Information Commissioner.
Who is Storm?
Storm was first observed in August, and since then, the group has posted the details of more than 50 alleged victims.
The Sharp Motor Group and machinery management specialist Macquarrie both recently confirmed they were responding to a cyber security incident at a third-party supplier.
“Sharp Motor Group is aware that our third-party IT provider has been involved in a cyber incident,” a company spokesperson told Cyber Daily.
Most of the group’s Australian victims have been automotive or farm machinery dealers.
Who is Penfold Motors?
Penfold has six locations across Victoria and is a part of the Peter Warren Automotive Group.
“From our first dealership established in 1964, we have built our reputation on brands that both celebrate their heritage and lead the sector in technical innovation,” the company said on its website.
“From new and quality pre-owned vehicles to tailored finance and insurance options, servicing, genuine parts, and accessories, our expert teams are here to support every stage of your ownership journey.”
Click Here For The Original Source.
