Loading story…
Hundreds of Porsche vehicles in Russia became undrivable after a widespread malfunction in their factory-installed satellite-based Vehicle Tracking System (VTS). The issue, which began in late November, caused the VTS to lose satellite connectivity, triggering the cars' engine immobilizers and blocking fuel delivery, as the system interpreted the loss of signal as a theft attempt. Russian dealership group Rolf reported a surge in service requests and confirmed that all Porsche models with internal combustion engines were affected, with owners in multiple cities experiencing sudden engine shutdowns. Workarounds such as disabling or rebooting the VTS, removing the module, or disconnecting the car battery for extended periods were reported to restore functionality in some cases.
Speculation initially arose regarding a possible cyberattack, but Porsche's headquarters stated that there was no evidence of hacking and that the issue was isolated to Russia, with no other markets impacted. The company emphasized its commitment to vehicle cybersecurity, citing secure software updates and regular security testing. However, due to sanctions following Russia's invasion of Ukraine, Porsche no longer provides exports or after-sales support in the country, complicating diagnosis and resolution. Security experts noted that while a hack was technically possible, there was no indication of coordinated malicious activity, and the incident highlights the broader risks associated with connected vehicle security systems.
Track how attackers are adapting to this technology.
2 events from the most recent confirmed update back to the earliest known activity.
Subsequent coverage described the Porsche disruption in Russia as a reminder of the risks tied to connected vehicle ecosystems, emphasizing how outages or loss of backend support can affect vehicle usability. This was an analytical development rather than a separate technical incident.
Porsche owners in Russia experienced a service outage that impaired connected vehicle functions, with reports that some cars effectively 'forgot how to car' because backend services were unavailable. The incident highlighted the dependence of modern vehicles on remote digital infrastructure.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Russian security systems provider **Delta** said it was hit by a cyberattack that disrupted services used in commercial facilities, private homes, and automobiles. Reports said customers experienced widespread failures in vehicle security functions, including cars that would not start, alarms that could not be turned off, and vehicles that could not be opened, while some users were told recovery might require dealer reflashing. At the same time, Delta’s website was unavailable and its phone lines were reportedly unreachable, compounding the outage. The incident drew concern because Delta’s products are used for remote protection and access control, raising the prospect of broad operational disruption for customers. Delta confirmed the cyberattack to Russian media, but no actor had been publicly identified, and there was no confirmed evidence of a personal data leak despite customer fears that account or vehicle-related information may have been exposed.
Jun 29, 2026
Autovista has confirmed a ransomware infection affecting its systems in Europe and Australia, disrupting multiple customer-facing applications used by automotive-sector clients. The London-headquartered automotive data and analytics firm said impacted services include tools for residual value monitoring, market trend analysis, and total cost of ownership assessments, and that it has brought in external specialists to help contain and remediate the incident. The company said the investigation is still at an early stage and the initial intrusion vector remains unknown while third-party experts examine the root cause. Autovista has prioritized securely restoring affected applications but has not provided a recovery timeline, and it warned customers that some staff email access has been restricted, advising them to monitor its website for updates and use an alternative company email address for urgent contact.
Jun 29, 2026
A **cyberattack** disrupted operations at **Delta**, a Russian provider of alarm and security systems for homes, businesses, and vehicles, causing widespread outages and customer complaints. Delta described the incident as a “**large-scale**” and “well-organized” external attack, with company leadership claiming it originated from an unspecified **hostile foreign state**; Delta also said it had **no evidence** at the time that customers’ personal data had been compromised. As services went down, Delta’s **website and phone lines** remained offline into the following day, forcing the company to communicate with customers via **VKontakte** while it worked to restore systems from backups amid concerns about follow-on attacks. The outage had immediate real-world impact, particularly for users of Delta’s vehicle security features: reports described customers being unable to **unlock cars**, **disable alarms**, or use **remote start**, with some accounts alleging doors locking unexpectedly and even **engines shutting down while in motion**. Separate reporting noted Delta’s app (launched in 2020) supports tracking vehicle location and stores **payment data**, increasing customer concern about potential exposure if Delta’s internal systems were breached; however, no threat actor has claimed responsibility and it remains unclear whether the disruption was caused by **DDoS** or a more destructive intrusion such as **ransomware** or a **wiper**.
Jun 29, 2026