Norauto Location: 78,000 customers affected by a data leak, including identity document numbers

The series continues. A data leak was revealed on Tuesday by Norauto, a brand specializing in automobile maintenance. In total, 78,000 of the company's customers are affected by this new data theft.

Norauto rental service victim of cyber attack

According to the brand's official communication, Norauto was the subject of an act of cybermaliciousness. The investigations carried out indicate that the targeted data specifically concerns those linked to the rental service. Here is the data affected by the leak, which varies depending on the customer:

• First and last names;
• Email addresses;
• Postal addresses;
• Telephone numbers;
• Loyalty card numbers;
• Identity document numbers provided during rentals.

However, Norauto does not specify at this stage the proportion of customers affected by the leak of identity document numbers.

The risks linked to this data leak

As with every data leak, vigilance and caution are the watchwords, especially in the months and weeks following the attack. The stolen data is frequently resold on the Dark Web in order to be cross-referenced and subsequently used in more or less well-crafted malicious acts: phishing attempts, fraudulent calls and various scams. Regarding the CNI number, although it alone is not enough to usurp your identity, it can be used for other purposes:

• False documents or identity theft partial : the name, first name and number of an identity document can be used to create false documents or to overcome certain simple administrative situations where limited checks are carried out;
• Third-party abuse: The scammer may try to use this information as proof of identity to conclude a contract or purchase online. In this scenario, the cybercriminal can be limited depending on the checks carried out by the third party;

If the fact of having detailed information on the civil status of the victims (surname, first name, address, etc.) reinforces the fears linked to this leak for customers whose CNI number is concerned, remember that serious institutions will ask usually additional verification such as proof of full ID.