Ferrari listed on RansomEXX leak site

• Ransomware group: RansomEXX
• Country: Italy
• Sector: Manufacturing
• Announcement date: October 2, 2022

RansomEXX claims to have stolen Ferrari data

The RansomEXX ransomware group has published documents on their leak site that they claim belong to the luxury automotive manufacturer Ferrari. This announcement, which occurred on October 2, 2022, marks a significant potential breach involving highly specialized technical information belonging to the Italian organization.

According to the claims made by the threat actors, the group has successfully exfiltrated and subsequently published various internal documents and technical data allegedly belonging to the organization. The group officially listed Ferrari on their leak site on the same day the attack was claimed to have occurred. The total volume of the data made available for access is stated to be approximately 6.99 GB.

Details of the claimed data leak

The information released by the RansomEXX group reportedly includes a variety of sensitive internal documentation. Based on the announcement, the leaked content is not limited to a single category but spans several types of technical records used in automotive manufacturing and maintenance. The group provided evidence of the breach through screenshots that appear to display specific technical updates and service procedures related to Enzo Ferrari models.

The specific types of data mentioned in the listing include:

• Technical documents
• Repair manuals
• Internal datasheets

While the group has released a significant amount of data, no specific information was provided regarding the ransom demand or the exact file count within the 6.99 GB archive.

About Ferrari

Ferrari is an Italy-based automotive manufacturer that designs, produces, and sells luxury sports cars worldwide. The company is renowned for its high-performance vehicles and its long-standing history in motorsports.

Potential impact and industry implications

This leak may pose a potential risk to the organization's intellectual property and trade secrets. Since the leaked technical documents could contain sensitive information regarding production processes or vehicle designs, it may negatively impact the company's competitive advantage. For an organization operating within the European Union, such as this Italy-based manufacturer, the publication of such data may be subject to the General Data Protection Regulation (GDPR).

Furthermore, the public disclosure of these materials could lead to a loss of trust among the organization's supply chain partners and customers. In the broader context of cyber threats, ransomware groups often employ a