AutoBeta(AutoBeta.net)12/20 Report--

Lu long, chief information security scientist of Lulai, posted a notice on the official APP on December 20 that some lawbreakers were selling data related to Lulai on the Internet. The company received an external email on Dec. 11 claiming to have internal data from NIO and extorted $2.25 million in bitcoin for leaked data, the statement said. After receiving the blackmail, the company set up a special team on the same day to investigate and respond, and immediately reported the incident to the relevant regulatory authorities. After a preliminary investigation, the stolen data are the basic information of some users and vehicle sales information before August 2021.

Stealing, buying and selling such data is an illegal and criminal act, which the company severely condemns and will not bow to cybercrime. Wei Lai said that he apologized for the impact of this incident on users and solemnly promised to take responsibility for the losses caused to users as a result of this incident. At the same time, we will cooperate with the relevant law enforcement departments to conduct an in-depth investigation into the incident and resolutely crack down on related data theft and trading in accordance with the law. NIO has the responsibility and obligation to use all means to protect users' information security. after the incident, we investigated and strengthened the company's network information security in order to avoid the recurrence of such incidents. We will learn lessons, strengthen the technical force, and constantly improve the security protection capability of the Lai information system, so as to fully protect the information security of users.

It is understood that before the announcement, someone posted suspected stolen internal data in the user base, saying, "recently, we have cracked a large amount of data and given NIO two opportunities." but NIO would rather spend tens of millions of dollars to hire singers than buy out this part of the data to protect car owners and users, so it decided to pay for exposure.

For example: 1. NIO internal employee data 22800, including the president to front-line employees, engaged in new energy recruitment and headhunting can follow, the price of 0.15 bitcoin; 2. Car owner user ID card data 399000, engaged in black ash products can follow, the price of 0.25 bitcoin; …... 8. Car owner intimacy data 360000 items, mining social relations can follow, the price of 0.2 bitcoin; 9. There are 170000 loan data for car owners, and the price is 0.1 bitcoin.

There has been a heated discussion about the theft of internal data from the company. Some users think, "the company that publishes information security events is a company that is honest and pays attention to information security." Explain that there are complete event analysis, traceability, disposal, and reinforcement mechanisms for information security. " There are also users who think, "it is the responsibility of NIO to protect customer information, and the key is why you have been blackmailed online before releasing this news."... It happened last year. It's a bit of an integrity crisis. " Another user said, "what information has been leaked, how to save it, and how to compensate for it?"

As mentioned by the company, stealing and buying and selling internal data is an illegal and criminal act. However, some netizens speculated that it blatantly stole company data and traded in bitcoin, which may not be in China. At present, the incident has yet to be further investigated.

Welcome to subscribe to the WeChat public account "Automotive Industry Focus" to get the first-hand insider information on the automotive industry and talk about things in the automotive circle. Welcome to break the news! WeChat ID autoWechat