Weilai: some user data before August 2021 was stolen and blackmailed for $225 million

Thanks to CTOnews.com netizens for their witty meow clue delivery! According to CTOnews.com news on December 20, Lu long, chief information security scientist and head of the information security committee, issued an announcement in the official community of Lulai today. On December 20, some lawbreakers sold relevant data online. In response, the company declares as follows:

On December 11, 2022, the company received an external email claiming to have internal data from Weilai and extorting $2.25 million (currently about 15.705 million yuan) in bitcoin for leaked data.

After receiving the blackmail, the company set up a special team on the same day to investigate and respond, and immediately reported the incident to the relevant regulatory authorities.

After a preliminary investigation, the stolen data are some basic user information and vehicle sales information before August 2021.

We apologize for the impact of this incident on users and solemnly promise to be responsible for the losses caused to users as a result of this incident. Stealing, buying and selling such data is an illegal and criminal act, which the company severely condemns and will not bow to cybercrime. We will cooperate with the relevant law enforcement departments to investigate this incident in depth and resolutely crack down on related data theft and trading in accordance with the law.

The company once again apologized for the incident. Weilai has the responsibility and obligation to use all means to protect users' information security. after the incident, we investigated and strengthened the company's network information security in order to avoid the recurrence of such incidents. We will learn lessons, strengthen the technical force, and constantly improve the security protection capability of the Lai information system, so as to fully protect the information security of users.

If you have any questions about this data breach, please call 400-999-6699 or email Privacy.cn@nio.com.

CTOnews.com learned that Xilai delivered a total of 49887 units from January to July in 2021, 43728 in 2020, 20565 in 2019 and 11348 in 2018. It is not clear what the official proportion of "partial users" is. CTOnews.com friends should beware of fraudulent information if they have bought Xilai before August 2021.