Renault Group said certain U.K. customer data was stolen in a cyberattack targeting one of its data processing providers.
The France-based automaker said the data involved personal contact and vehicle information. There was no credit card or financial information lost in the breach.
The company said no other Renault systems were impacted by the attack. The third-party provider has told Renault that the attack has been contained, according to a Renault spokesperson.
Renault said it has contacted all relevant authorities, including the U.K. Information Commissioner’s Office. A spokesperson for the ICO confirmed that an incident had been reported and the office is making inquiries in response.
The stolen data includes customer names, addresses, dates of birth, gender, phone numbers, vehicle registration and vehicle identification numbers. The company did not provide a total number for how many customers were affected, citing security concerns.
The company said it is contacting all affected customers and reminding them to be careful about any potential unsolicited contact.
Renault sold about 2.3 million vehicles worldwide in 2024.
The incident marks the latest in a series of recent attacks in the automotive sector. UK-based luxury carmaker Jaguar Land Rover was hit by a major direct attack against its systems, which led to production being disrupted for weeks.
The early September attack caused major ripple effects across the company’s supply chain and the U.K. government is backing a $2 billion loan to help get the JLR supply chain back up and running as part of a deliberate, careful relaunch of operations.
Bridgestone Americas has also begun to restart production after the tire maker was struck by a major attack. The company shut down production at several key facilities in the U.S., Canada and Latin America last month.
Also, Stellantis recently reported the theft of customer data in an attack against a third-party data platform.