Tesla has started to notify current and former employees after 75,000 confidential files with personal information were included in an insider data breach in May.
The data breach which involved employee-related records at the Austin, Texas-based automaker was a result of “insider wrongdoing,” according to an Aug. 18 notice on the Maine attorney general office’s website.The leak affected 75,735 Tesla workers in total and involved Social Security numbers, names, and addresses, said the company.
German Newspaper Reports Insider Breach at Tesla
“A foreign media outlet (named Handelsblatt) informed Tesla on May 10, 2023, that it had obtained Tesla confidential information,” according to a letter from Tesla in a letter posted on the website of the Maine attorney general’s office.The newspaper, which is based in Germany, received at least 100 gigabytes of confidential data from the two leakers.
Handelsblatt reported in May that Tesla had allegedly failed to adequately protect data from customers, employees, and business partners after a “disgruntled former employee” provided them access to the files as a service technician.
The letter said that lawsuits have since been filed by the carmaker against the two former employees, without specifying the exact jurisdiction of the case.
Tesla said it had “obtained court orders that prohibit the former employees from further use, access, or dissemination of the data, subject to criminal penalties,” and that it would cooperate with ”law enforcement and external forensics experts and will continue to take appropriate steps as necessary.”
“These lawsuits resulted in the seizure of the former employees’ electronic devices that were believed to have contained the Tesla information,” the letter continued.
The electric carmaker informed employees that it failed to detect any misuse of personal data and would offer complimentary membership to Experian IdentityWorks’ credit monitoring and identity theft service.
Memberships will be for one or two years, depending on the employee and the specific engagement number on the letter that they receive.
The Epoch Times has reached out to Tesla for comment.Recent Data Breach Could Spell Trouble for Carmaker
According to the leaked files, Handelsblatt reported that there were almost 4,000 customer complaints regarding the carmaker’s driver assistance systems, especially regarding sudden acceleration or phantom braking.The German union, IG Metall, called the leaks “disturbing” and demanded that Tesla inform employees about future data protection breaches and allow staff to discuss problems and grievances openly without fear.
“These revelations … fit with the picture that we have gained in just under two years,” Dirk Schulze, IG Metall district manager for Berlin, Brandenburg and Saxony, told Reuters.
Meanwhile, the failure by Tesla to protect the information could be seen as a violation of the European Union’s General Data Protection Regulation, which mandates protection of employee information.Meta was hit with a record $1.3 billion fine in May by the top European Union privacy regulator over its handling of user information and was ordered to stop transferring user data to the United States within five months.
In April, Reuters reported that several Tesla employees had privately shared some highly sensitive videos and images recorded by internal car cameras, between 2019 and 2022, via an internal messaging system.
Reuters contributed to this report.
