Stellantis North America Sued Over Everest Ransomware Attack

Jan. 21, 2026, 8:53 PM UTC

Stellantis North America was sued by a married couple from Illinois for allegedly negligently failing to protect customer data after hackers stole their personal information in a ransomware attack.

Loria and Thomas Spadafore filed the class-action lawsuit Wednesday in the US District Court for the Eastern District of Michigan. The complaint alleges the Everest ransomware group breached Stellantis’ systems around December 25, 2025, accessing one terabyte of sensitive customer data.

The hackers threatened to publish the information unless the maker of Jeep, Chrysler, Fiat and other marques paid a ransom, but the company refused and the criminals released the data ...

Learn more about Bloomberg Law or Log In to keep reading:

See Breaking News in Context

Bloomberg Law provides trusted coverage of current events enhanced with legal analysis.

Already a subscriber?

Log in to keep reading or access research tools and resources.