Data exposed in the breach was disclosed to German media outlet Handelsblatt, as stated by Tesla’s data privacy officer, Steven Elentukh, in a submission to the Maine attorney general’s office.
Handelsblatt informed Tesla that it had received sensitive information, including identifiable details like names, addresses, phone numbers, and social security numbers, as per Tesla’s submission dated 18th August.
At that time, Tesla identified the employees responsible for the leak, initiated legal action against them, and confiscated their devices, the company announced.
In the United States, companies are required to report data breaches of a certain magnitude to relevant authorities, with legal requirements varying from state to state.
This breach incident follows a Reuters report in April, which revealed that groups of Tesla employees privately shared customer information, including videos and images captured by car cameras, via internal messaging systems.