18K NMAC account numbers compromised in third-party data breach

Nearly 18,000 Nissan Motor Acceptance Company account numbers were compromised in a third-party data breach last year, prompting the company to investigate the incident and provide notification and protection services to customers. The data breach, which occurred June 21, 2022, and was discovered on Sept. 26, 2022, involved data sent to a third-party software provider for testing purposes, according to a Jan. 17 filing with the Maine Attorney General’s Office. In all, 17,998 consumers were affected, including 785 Maine residents. What Happened: Nissan provided information such as consumers’ names, dates of birth and NMAC account numbers to a third-party provider of software development services as part of a software test, according to Franklin, Tenn.-based Nissan Motor North America ’s notice to consumers of the breach filed with the Attorney General’s Office, which notes that Social Security numbers and credit card information were not compromised. Nissan found during the September investigation that the breach likely resulted in consumers’ personal information being unintentionally publicly stored. Why It Matters: Auto lenders are required to safeguard customer information under the Gramm-Leach-Bliley Act , which calls for more stringent requirements under the Federal Trade Commission ’s updated rules, including that lenders monitor how third-party service providers use and protect data. The rules require lenders to include language in service provider contracts obligating providers to implement appropriate safeguards to protect consumer information. Nissan’s Response: Nissan is providing affected consumers with one year of free credit monitoring and identity protection services through Experian . “The security of our customers and their data is a top priority for Nissan Motor Acceptance Corp. When we became aware that a third-party vendor had inadvertently placed some customer data in a unsecured, cloud-based storage location, we immediately worked with the vendor to quickly secure the data and investigate the incident,” Steve Parrett, regional manager of corporate communications at Nissan North America told Auto Finance News . “As a result of that investigation, we are directly notifying affected consumers in accordance with all federal, state and local laws. At this time, we believe the risk is low, but, out of an abundance of caution, we are offering these consumers one year of credit monitoring services at no cost.” Nissan’s Canadian finance arm grappled with a similar data breach in 2017, and Capital One in 2019 was the target of a data breach that compromised 140,000 Social Security numbers and 80,000 bank accounts. Equifax also in 2019 shelled out $700 million in fines and financial relief for a 2017 breach that compromised 147 million consumer identities. Auto Finance Summit East, Auto Finance News’ new spring event, kicks off May 10-12 at the JW Marriott Nashville featuring a fireside chat with Peter Muriungi, CEO of Chase Auto. Visit autofinance.live/afs-east .

18K NMAC account numbers compromised in third-party data breach

Social Security numbers and credit card information were not compromised

PNC Financial auto portfolio shrinks YoY for third straight quarter

Cash is king for luxury car buyers in 2023

Related Posts

Podcast: EV sales slow in November, used-vehicle values flat

Auto rejections reach second-highest rate recorded in October (Big Wheels)

Used-vehicle prices flat, sentiment improving

Wholesale towable values drop 20.2% YoY in October

Cash is king for luxury car buyers in 2023

Stay Informed with Our Newsletters

The Roadmap Podcast

Retrieve your password