Yazılar

Stellantis reports data breach at third-party provider for North America

Stellantis, the parent company of Chrysler, said on Sunday it had detected unauthorized access at a third-party service provider supporting its North American customer service operations.

The company confirmed that the breach exposed only basic contact information, with no financial or highly sensitive personal data compromised. Stellantis did not specify how many customers were affected.

“Upon discovery, we immediately activated our incident response protocols … and are directly informing affected customers,” Stellantis said, adding that authorities have been notified. The automaker urged customers to remain vigilant against phishing attempts.

The breach is the latest in a growing wave of cyberattacks targeting automakers. Earlier this month, Jaguar Land Rover was forced to shut factories until September 24 after a major cyber incident disrupted retail and production operations.

The rise in attacks reflects the increasing vulnerability of the automotive industry, as digital platforms and connected services become more integral to customer operations and vehicle support systems.

JPMorgan to Charge Fintech Firms for Access to Customer Bank Data, Bloomberg Reports

JPMorgan Chase is planning to start charging fintech companies for access to its customers’ bank account data, Bloomberg News reported Friday, citing sources familiar with the matter. The U.S.’s largest bank has sent pricing proposals to data aggregators — intermediaries that connect banks with fintech platforms — outlining fees that may vary depending on the use case. Payment-focused fintech firms are expected to face higher charges.

A JPMorgan spokesperson stated the bank has invested heavily in building a secure system to protect customer data. The spokesperson added that JPMorgan is engaging with industry players to ensure necessary investments are made in infrastructure that safeguards customer information.

This move could disrupt payment app companies that currently rely on free access to customer financial data to facilitate transactions. Following the news, shares of major payment firms fell sharply: PayPal dropped 6.3%, Block fell 5.6%, while Visa and Mastercard declined around 2.8% and 2.9%, respectively.

The fees are expected to be implemented later this year but remain subject to negotiation, according to Bloomberg.

In the broader regulatory context, U.S. banking giants like JPMorgan are advocating for lighter regulations under President Donald Trump’s administration, in contrast to the stricter capital requirements imposed during the Biden administration.

Qantas reveals cyber breach exposed personal data of over 5 million customers

Australia’s Qantas Airways confirmed on Wednesday that a major cyberattack compromised the personal data of approximately 5.7 million customers, marking one of the country’s largest data breaches in recent years. Initially, Qantas reported 6 million records affected but later removed duplicates.

More than one million customers had sensitive details like phone numbers, birth dates, or home addresses accessed. An additional four million customers’ data was limited to names and email addresses.

The airline said there is currently no evidence that the stolen data has been publicly released, and it is actively monitoring the situation to protect affected customers.

“Since the incident, we have implemented several new cybersecurity measures to better safeguard our customers’ data and are thoroughly reviewing the breach,” Qantas Group CEO Vanessa Hudson stated.

This breach follows a wave of high-profile cyberattacks in Australia, including those against telecom giant Optus and health insurer Medibank in 2022, which spurred the introduction of mandatory cyber resilience regulations.