A vulnerability in Skoda's online shop portal was exploited by attackers to access personal customer data such as names, addresses, emails, phone numbers, order details, user accounts, and password hashes. Credit card information was not affected as it is processed externally. Upon discovery, Skoda took immediate remediation steps including taking the shop offline, patching the vulnerability, reviewing security controls, and involving forensic experts. The breach was detected through technical monitoring, and relevant authorities were informed. The company cannot confirm if data was exfiltrated or the breach's full scope.

The breach exposed sensitive personal information of Skoda online shop customers, potentially increasing risks of phishing and unauthorized account access. Password hashes were accessed, which could lead to credential compromise if cracked. No financial data was compromised, reducing direct financial fraud risk. The company has not confirmed the volume of affected individuals or data exfiltration extent, limiting full impact assessment.

Skoda has patched the exploited vulnerability and taken the online shop offline temporarily. Customers are advised to change their passwords, especially if reused across services, and to be cautious of phishing attempts or suspicious communications referencing Skoda. The company has engaged external forensic experts and notified authorities. No further immediate action is required from customers beyond vigilance and password updates.