Massive Data Leak Exposes 600,000 Lithuanian Records in Suspected State-Backed Cyberattack Lithuanian authorities are investigating a major data breach that compromised over 600,000 entries from national registers, including real estate and legal entity records. The leak, detected by the General Prosecutor’s Office, was executed using login credentials of authorized institutions, raising concerns about insider access or credential theft. Adrijus Jusas, head of the state-run Centre of Registers, resigned following the incident. In response, authorities have tightened cybersecurity measures, blocking suspicious accounts and mandating credential updates to prevent further unauthorized access. While officials have not named the suspected foreign actor, speculation points to Russia, given Lithuania’s status as a frequent target of Moscow’s hybrid warfare tactics including sabotage, disinformation, and cyber operations. Opposition politician Laurynas Kasčiūnas suggested the breach may be a Russian intelligence operation, though no evidence was provided. He warned that sensitive data, such as addresses of intelligence officers, military personnel, and diplomats, could have been exposed, posing risks of espionage or coercion. The incident underscores Lithuania’s vulnerability amid heightened geopolitical tensions, with authorities treating the breach as a potential state-sponsored attack. Investigations are ongoing.

General Motors faces significant financial repercussions due to the newly implemented 25% tariffs on vehicles and auto parts, which directly affect this major automaker more so than its competitors. Being heavily invested in production facilities in Mexico and Canada, GM's extensive reliance on these regions for manufacturing results in a sizeable portion of its portfolio—55% of vehicles sold in the U.S.—being subject to the tariffs. This situation could lead to increased vehicle costs, reduced market competitiveness, and potential sales declines due to higher consumer prices. The financial hit is exacerbated by the intertwined nature of the auto industry's supply chain and could further lead to strategic shifts in production or sourcing decisions.

On July 8, 2024, the Maine Office of the Attorney General reported a data breach involving General Motors (GM) that occurred between May 18, 2024, and May 20, 2024, affecting 65 GM MyAccounts, including two Maine residents. The breach involved unauthorized logins likely using compromised credentials from external sites, potentially exposing limited personal information such as names, addresses, and last four digits of payment cards, though no evidence indicates GM's login information was obtained.

The Chevrolet Camaro ZL1, a high-performance vehicle, has been identified as the most stolen car in the U.S., with theft rates 39 times higher than the average. The vulnerability lies in the on-board ports, which thieves exploit to gain unauthorized access. This issue affects model years 2022-2024, leading to significant financial losses and reputational damage for General Motors. The company has released a software update to mitigate the vulnerability, but the incident highlights a critical security flaw in their vehicle design.

American automaker General Motors was targeted in a credential stuffing attack in April 2022 after it noticed malicious login activity to customers’ accounts. The attackers accessed customers’ personally identifiable information (PII) and redeemed reward points for gift cards. The company deactivated the reward feature and notified the customers and law enforcement authorities and asked its customers to reset their passwords and monitor their credit reports for potential fraud.