NASCAR confirms user data breach following Medusa ransomware attack


NASCAR has confirmed it suffered a cyberattack and a data breach in April 2025 which saw personal information of racing fans allegedly stolen.

The organization filed data breach reports with attorneys general in multiple US states, describing what had happened, and how it responded, noting the attack started on March 31, 2025, and was spotted – and stopped – on April 3. During that period, the company said it secured its network, brought in third-party cybersecurity experts to analyze the incident, and notified the appropriate law enforcement.

Read more…
Source:  TechRadar News


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • U.S. DOJ: Prolific Chinese state-sponsored contract hacker extradited from Italy

    April 27, 2026

    Xu Zewei (徐泽伟), 34, of the People’s Republic of China was extradited to the United States this weekend and appeared today in U.S. District Court in Houston on a nine-count indictment related to his involvement in computer intrusions between February 2020 and June 2021. Certain of those computer intrusions allegedly are part of the HAFNIUM computer ...

  • Governments on high alert after CISA snuffs out Firestarter backdoor on fed network

    April 24, 2026

    A US federal agency was successfully targeted by a previously unknown backdoor malware called Firestarter, according to CISA cybersnoops and their UK counterparts – neither of which disclosed the agency’s name. Federal Civilian Executive Branch (FCEB) agencies include NASA; Homeland Security itself (cyberworkers at CISA are part of an operational unit in Homeland Security); the FBI; the DoJ; the IRS; the ...

  • Iran claims US used backdoors to knock out networking equipment during war

    April 21, 2026

    Iranian media is claiming that the US used backdoors and/or botnets to disable networking equipment during the current war, and Chinese state media is dining out on the allegations. Reports from Iran claim hardware made by Cisco, Juniper, Fortinet, and MikroTik either rebooted or disconnected during recent attacks on Iran – despite the regime disconnecting the ...

  • Amtrak data breach exposes 2.1M records, reports suggest larger leak

    April 20, 2026

    Booking a train ticket shouldn’t come with a side of data exposure, but that’s the situation Amtrak customers are now facing. The rail service is dealing with a breach after hackers claimed to have accessed and released millions of customer records online. The exposed dataset was confirmed to contain at least 2.1 million unique accounts, although ...

  • British National Pleads Guilty to Hacking into Companies and Stealing At Least $8 Million in Virtual Currency

    April 17, 2026

    SANTA ANA, California – A United Kingdom man pleaded guilty today to conspiring with others to hack into the computer systems of at least a dozen companies via text message phishing attacks and to steal at least $8 million in virtual currency from individual victims throughout the United States. Tyler Robert Buchanan, 24, of Dundee, Scotland, ...

  • US intel officials scramble to keep surveillance law running amid Iran war tensions

    April 13, 2026

    With just days until a powerful surveillance law lapses, US national security officials are scrambling to prepare for potential blind spots in intelligence collection amid the US’ delicate ceasefire with Iran, current and former officials told CNN. Some communications carriers that manage data for the surveillance program have privately warned the Trump administration they will cease ...