Information regarding Audi Models Q4 e-tron and Q6 e-tron

The German Chaos Computer Club (CCC) has informed the VW Group on the 26th of November 2024 about a programming interface (API) issue in the backend systems of an affiliate company. The API issue has been solved and any access is closed. There are no signals that anyone except for the CCC could have had access to the API. Also, CCC has explicitly informed us that no data has been forwarded or will be forwarded to any third Party.

The issue referred exclusively to Audi Q4 e-tron and Q6 e-tron Models with activated online function and active connection to the cloud solution. Other vehicles are not affected. 

Types of data are Name of the Main User, Nickname, E-Mail, User-ID, VIN, Parking Position when parked and engine off, certain events (ignition, mileage, climate, warning signals). Not affected are any data referring to payments or any banking details or passwords.  

We have been informed about what we care most: customers do not need to change passwords or access codes or take any further action. There is no data available. 

For any upcoming information we will provide updates here. Our customer care is informed, but has no further information than provided here. Please consider that due to the holidays our customer care already manages a high number of calls. 

The CCC showed their expertise by noticing the API issue and they had to tackle security measures, which usually requires specific skills. As this was a complex procedure managed by the CCC, investigations about the whole proceedings and consequences are still ongoing. 

Cyber crime and hackers are on the rise ever since and we do not expect VW Group to be out of scope. We appreciate the information provided by the CCC, as this is realistic proof of our Group IT Security Architecture. It enables us to retrieve more information and improve our security measures. Our focus will always be to provide high security standards for our customers. All relevant authorities have been informed by us which is of course mandatory under German and European legislation.