Tesla Confirms Shanghai Factory Was Not Breached by Verkada Hackers
Tesla said on Wednesday following a hacking incident Tuesday of the webcams of a number of companies, that its Gigafactory and showroom in Shanghai’s cameras had not been apart of the attack, as reported by Reuters.
According to Tesla China to Reuters, the hack was largely restricted one supplier site in the Henan province of China, as the small group of hackers gained access to live and archived footage from hundreds of businesses using Verkada security cameras.
Tesla China said video data from the supplier in Henan was stored locally and not in the cloud, noting there was no risk from the Verkada breach on the site.
Verkada, acknowledging the attack, said it subsequently had disabled all internal administrator accounts to prevent any further unauthorized action, prior to Bloomberg reporting the incident Tuesday.
With the adoption of everything as a service, the security perimeter has drastically shifted from networks to identities and contracts
"Tesla (TSLA), Cloudfare (NET) Breached in Verkada Security Camera Hack – Bloomberg" https://t.co/nw6Xr1vGrl— Alok Vimawala (@alokvimawala) March 10, 2021
On Tuesday, following the attack, the company said, “Our internal security team and external security firm are investigating the scale and scope of this issue, and we have notified law enforcement [and customers].”
The incident, which targeted nearly 150,000 security cameras made by Verkada, a Silicon Valley company, took place Tuesday and gave hackers access to schools, hospitals, a police department’s interview area, a community gym, and an Alabama jail, among other organizations.
Swiss software developer Tillie Kottman, who is known for finding security flaws in software systems, supplied Reuters with recordings from inside Tesla’s China factory and a California showroom, as well as a list of Verkada user accounts and screenshots from the aforementioned locations.
While Reuters reports it could not verify the authenticity of the list or article supplied by Kottman, but Tesla maintains that the hack only affected only one of its suppliers’ security cameras, rather than any at Tesla’s Shanghai facilities.