Tuesday, March 4, 2025
HomeCyber Security NewsRansomEXX Gang Hacked Ferrari - Over 7GB of Internal Documents Stolen

RansomEXX Gang Hacked Ferrari – Over 7GB of Internal Documents Stolen

Published on

SIEM as a Service

Follow Us on Google News

An Italian luxury sports car manufacturer, Ferrari was hit by ransomware. The RansomEXX gang claims to have hacked Ferrari, more than 7 GB of data, including internal documents, datasheets, and repair manuals have been stolen.

The car manufacturer says that there is no evidence of the data breach and no disruption to the business due to the ransomware attack.

On the other hand, Ferrari said that it was working to identify how the documents were made public and that appropriate actions would be taken as needed.

Corriere della Sera newspaper, citing the Italian website the Red Hot Cyber, reported that the luxury carmaker had been a victim of a cyber attack.

RansomEXX data leak site statement

The data that is made available and freely downloadable are 7GB. The cyber attack was first reported by the Italian website Red Hot Cyber stated that the ransomware gang RansomEXX claimed to have breached the popular car maker on its Tor leak site.

Freely Downloadable Files from Undergrounds

So far the source of these documents remains unclear. Earlier, the attack by Everest ransomware allegedly hacked Speroni Spa’s systems. The company is part of the supply chain of multiple car makers including Ferrari.

Reports say, 850 GB of the company’s data, including customer and employee data, technical data, financial documents, bank statements, and other very important documents were put up for sale after the attack.

Cyber Attack with Zero Trust Networking – Download Free E-Book

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Docusnap for Windows Flaw Exposes Sensitive Data to Attackers

A recently disclosed vulnerability in Docusnap's Windows client software (CVE-2025-26849) enables attackers to decrypt...

CISA Warns of Active Exploitation of Microsoft Windows Win32k Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2018-8639, a decade-old Microsoft Windows...

Update Alert: Google Warns of Critical Android Vulnerabilities Under Exploit

Google’s March 2025 Android Security Bulletin has unveiled two critical vulnerabilities—CVE-2024-43093 and CVE-2024-50302—currently under...

BigAnt Server 0-Day Vulnerability Lets Attackers Run Malicious Code Remotely

A critical vulnerability in BigAntSoft's enterprise chat server software has exposed ~50 internet-facing systems...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Docusnap for Windows Flaw Exposes Sensitive Data to Attackers

A recently disclosed vulnerability in Docusnap's Windows client software (CVE-2025-26849) enables attackers to decrypt...

CISA Warns of Active Exploitation of Microsoft Windows Win32k Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2018-8639, a decade-old Microsoft Windows...

Update Alert: Google Warns of Critical Android Vulnerabilities Under Exploit

Google’s March 2025 Android Security Bulletin has unveiled two critical vulnerabilities—CVE-2024-43093 and CVE-2024-50302—currently under...