Nissan 2026 Third-Party Data Breach

Nissan, a multinational automotive manufacturer, disclosed a third-party data breach impacting over 20,000 customers. The breach occurred through a compromise at Red Hat, a technology infrastructure provider, resulting in unauthorized access to Nissan customer data. The incident was publicly disclosed in February 2026, though the internal discovery timeline remains unspecified.

The attack chain involved a supply chain compromise targeting Red Hat's systems, which subsequently exposed Nissan customer information stored or processed through those services. The confirmed data types include personal information of affected customers, though the specific elements within that category were not detailed in the disclosure. No specific threat actor attribution or exploitation techniques were identified in the public announcement.

Nissan has notified affected customers and regulatory authorities about the breach. The company is working with Red Hat to investigate the incident and implement additional security measures to prevent similar supply chain compromises in the future.