Volkswagen Group has reportedly been targeted by the ransomware group 8Base, which claims to have stolen sensitive data, including employee files and financial documents, threatening to leak it unless a ransom is paid. While Volkswagen asserts that its core IT infrastructure remains secure, the ambiguous nature of its response suggests a potential compromise through a third party. The incident highlights vulnerabilities within critical industries like automotive manufacturing, emphasizing the need for enhanced cybersecurity measures and third-party risk management to safeguard against such attacks. As investigations proceed, this event serves as a critical reminder of the escalating threats to corporate data security and the potential regulatory repercussions under the EU’s GDPR.