The company's wholly-owned subsidiary, Ferrari SpA, was contacted by the threat actor and immediately began an inquiry with a third-party cybersecurity firm, as well as notifying the appropriate authorities.
In a letter sent to Ferrari owners, the company disclosed that a limited number of IT systems were accessed, exposing data such as names, addresses, email addresses, and telephone numbers of their clients. The company verified the data provided by the perpetrators but stated that no payment details, bank account numbers, or other sensitive payment information were stolen.
Ferrari has chosen not to pay the ransom, citing its policy against funding criminal activity and enabling threat actors to continue their attacks. Instead, the company is focusing on notifying customers of the potential data exposure and the nature of the incident.
 |
| A letter sent to Ferrari owners |
Although the breach notification makes no mention of ransomware, it cannot be ruled out. Some criminal groups are shifting from ransomware and data exfiltration to pure blackmail, threatening to reveal clients and vendors. Regardless of the origin of the data, Ferrari has worked with third-party experts to reinforce their systems and ensure their resilience.
Ferrari CEO Benedetto Vigna apologized for the incident and assured customers that the company will do everything in its power to regain their trust. The carmaker has engaged a leading global third-party cybersecurity firm and notified the appropriate authorities, who will investigate the matter to the fullest extent of the law.
The stolen data, which contains information about wealthy individuals, could be valuable to criminals. Ferrari has reiterated that it is taking the necessary steps to prevent future incidents and protect its clients' sensitive information.