Crims hit EV charger firm ELECQ, steal customer contact data

ELECQ, a Chinese manufacturer of smart EV chargers, has notified customers of a ransomware attack on its AWS cloud platform detected on March 7. Attackers encrypted and exfiltrated data from databases, potentially stealing customer names, email addresses, phone numbers, and home addresses. No financial data or charging devices were affected. The company took servers offline, restored from backups, disabled remote access services like SSH and Telnet, and engaged third-party forensic investigators. ELECQ has reported the breach to UK and German data protection regulators. The number of affected customers, attacker identity, and whether a ransom was demanded remain unknown.