A data breach suffered by global car manufacturer Tesla earlier this year was the result of ‘insider wrongdoing’ on the part of two former employees, according to a submission by the company to the Attorney General’s Office in the US state of Maine.
The data, which was originally leaked to a German media outlet, contained a litany of complaints related to mechanical problems in Tesla vehicles and the personal data of 75,735 current and former employees of the firm. The electric vehicle manufacturer also confirmed that it has filed lawsuits against both ex-employees for their alleged role in the breach.
A letter to those affected accompanied the breach notification. It explains that “a foreign media outlet [the German newspaper Handelsblatt] informed Tesla on May 10, 2023 that it had obtained Tesla confidential information. The investigation revealed that two former Tesla employees misappropriated the information in violation of Tesla’s IT security and data protection policies and shared it with the media outlet.”
The data in question was leaked to Handelsblatt in April and includes thousands of complaints about braking problems and acceleration issues in Tesla vehicles. Reported by drivers across the US, Europe and Asia, these complaints refer to 2,400 self-acceleration issues, 1,500 braking problems – including 139 reports of ‘unintentional emergency braking’ – and 383 reports of ‘phantom stops’ from false collision warnings in Tesla vehicles.
Tesla data woes
The letter confirms that the electric vehicle manufacturer has filed lawsuits against the pair it claims leaked the information, leading to the confiscation of the work devices in their possession that held company data. “Tesla also obtained court orders that prohibit the former employees from further use, access, or dissemination of the data, subject to criminal penalties,” the letter continues. “Tesla cooperated with law enforcement and external forensics experts and will continue to take appropriate steps as necessary.”
This is not the first time Tesla has fallen victim to a devastating data breach. Another leak of delicate information took place in April, in which employees were sharing photos and images of company issues on private message boards. The messages included videos and pictures recorded by in-car cameras showing private footage of drivers.
Additionally, in June 2018 Tesla filed a lawsuit against a former employee when they made changes to the company’s source code, exporting gigabytes of proprietary data to unauthorised third parties. Tesla chief executive Elon Musk sent out a company-wide email at the time calling the perpetrator a ‘saboteur’. This contrasted with the actions of another employee two years later, whose agreement to inform on a Russian hacker’s attempt to inject malware into Tesla systems was, according to a tweet from Musk, ‘much appreciated‘.
Read More: Elon Musk launches xAI in bid to take on OpenAI and build ‘safer’ artificial intelligence
