Korean car-sharing firm SOCAR internal admin system breached with stolen credentials; staff and partner data leaked

Boannews reports SOCAR said on Nov 13 that it confirmed an external attacker used stolen internal credentials to abnormally access its internal management system, and activated emergency response ^[1]. Leaked items vary by person and include names and work emails of some current and former employees, phone numbers of some "SOCAR Handlers", and some of the names, emails, bank account numbers and encrypted card numbers of some partner staff; the company says general car-sharing customer data was not leaked ^[1]. What to do now: SOCAR advises affected people not to respond to impersonation calls or texts using the leaked data, not to click unknown links in emails, and not to answer requests for passwords or one-time passwords (OTP) ^[1].

Industries mainly affected: Transportation & logistics

1. Do not respond to impersonation calls or texts that use the leaked data ^[1].
2. Do not click unknown links in emails or answer requests for passwords or one-time passwords (OTP) .