{
  "id": "07c5c3b2-a87d-41c8-83d9-1469beb564dc",
  "url": "https://tagesschau.de/wirtschaft/unternehmen/vw-hacker-100.html",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Data theft / leaks",
  "country": "Germany",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Volkswagen",
    "Hacking",
    "offensive cyber operations",
    "China",
    "Automotive Industry",
    "Data Theft"
  ],
  "nodes": [],
  "countries": [
    "Germany"
  ],
  "where_text": "Cyberspace",
  "headline": "Volkswagen targeted by hackers for years stealing thousands of files, trace points to China",
  "description": "Between 2010 and 2015, hackers targeted the Volkswagen Group for several years, stealing up to 19,000 files, mainly targeting technological knowledge in engine development, transmission, and alternative drive technologies such as electromobility and fuel cells. According to reports by ZDF and Spiegel citing internal VW documents, the attack was a large-scale cyber espionage operation likely conducted by Chinese state hackers. The IP address was traced back to near the Chinese military intelligence service. Volkswagen acknowledged the incident occurred about ten years ago. The Chinese embassy denied involvement and condemned cyber espionage, while German security officials consider a Chinese state-backed attack highly probable.",
  "summary_short": "Between 2010-2015, hackers, likely Chinese state actors, infiltrated Volkswagen stealing about 19,000 files focused on car technology.",
  "summary_extended": "Between 2010 and 2015, Volkswagen was subject to repeated cyberattacks resulting in theft of approximately 19,000 files related to internal combustion engine development, transmissions, and alternative propulsion technologies. Internal documents reviewed by ZDF and Spiegel reconstruct a previously unknown large-scale cyber espionage operation attributed to Chinese state hackers, with IP addresses tracing back to military intelligence near Beijing. Volkswagen confirmed the incidents are about ten years old. Germany’s Federal Office for Security and Information Technology views Chinese cyber espionage targeting German automotive industry as highly likely. China officially denied the accusations and condemned cyber spying activities.",
  "actor_primary": "chinesische Staatshacker",
  "target_primary": null,
  "location_text": "Volkswagen Group headquarters and affiliates, Wolfsburg, Lower Saxony",
  "location_region": "Wolfsburg, Lower Saxony",
  "location_coordinates_lat": 52.42265,
  "location_coordinates_lon": 10.78655,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article clearly describes a multi-year hacking incident targeting Volkswagen by presumed Chinese state-backed actors stealing thousands of files related to automotive technology, confirmed by multiple sources and officials.",
  "event_time_utc": "2024-04-20T12:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-04-28T15:07:00.134Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "within_24h",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}

{
  "id": "07c5c3b2-a87d-41c8-83d9-1469beb564dc",
  "url": "https://tagesschau.de/wirtschaft/unternehmen/vw-hacker-100.html",
  "source": "extension",
  "status": "approved",
  "category": "Cyber & Information Warfare",
  "subcategory": "Cyber Attacks",
  "incident_type": "Data theft / leaks",
  "country": "Germany",
  "source_reliability": "C",
  "info_credibility": "3",
  "tags": [
    "Volkswagen",
    "Hacking",
    "offensive cyber operations",
    "China",
    "Automotive Industry",
    "Data Theft"
  ],
  "nodes": [],
  "countries": [
    "Germany"
  ],
  "where_text": "Cyberspace",
  "headline": "Volkswagen targeted by hackers for years stealing thousands of files, trace points to China",
  "description": "Between 2010 and 2015, hackers targeted the Volkswagen Group for several years, stealing up to 19,000 files, mainly targeting technological knowledge in engine development, transmission, and alternative drive technologies such as electromobility and fuel cells. According to reports by ZDF and Spiegel citing internal VW documents, the attack was a large-scale cyber espionage operation likely conducted by Chinese state hackers. The IP address was traced back to near the Chinese military intelligence service. Volkswagen acknowledged the incident occurred about ten years ago. The Chinese embassy denied involvement and condemned cyber espionage, while German security officials consider a Chinese state-backed attack highly probable.",
  "summary_short": "Between 2010-2015, hackers, likely Chinese state actors, infiltrated Volkswagen stealing about 19,000 files focused on car technology.",
  "summary_extended": "Between 2010 and 2015, Volkswagen was subject to repeated cyberattacks resulting in theft of approximately 19,000 files related to internal combustion engine development, transmissions, and alternative propulsion technologies. Internal documents reviewed by ZDF and Spiegel reconstruct a previously unknown large-scale cyber espionage operation attributed to Chinese state hackers, with IP addresses tracing back to military intelligence near Beijing. Volkswagen confirmed the incidents are about ten years old. Germany’s Federal Office for Security and Information Technology views Chinese cyber espionage targeting German automotive industry as highly likely. China officially denied the accusations and condemned cyber spying activities.",
  "actor_primary": "chinesische Staatshacker",
  "target_primary": null,
  "location_text": "Volkswagen Group headquarters and affiliates, Wolfsburg, Lower Saxony",
  "location_region": "Wolfsburg, Lower Saxony",
  "location_coordinates_lat": 52.42265,
  "location_coordinates_lon": 10.78655,
  "location_precision": "Approximate",
  "is_aggressor_signal": true,
  "signal_type": "HYBRID_SIGNAL",
  "is_hybrid_war_signal": true,
  "classification_complete": true,
  "hybrid_signal_complete": true,
  "classification_confidence": "High",
  "classification_rationale": "The article clearly describes a multi-year hacking incident targeting Volkswagen by presumed Chinese state-backed actors stealing thousands of files related to automotive technology, confirmed by multiple sources and officials.",
  "event_time_utc": "2024-04-20T12:00:00.000Z",
  "end_time_utc": null,
  "event_time_confidence": "pm24h",
  "created_at": "2026-04-28T15:07:00.134Z",
  "updated_at": "2026-11-04T08:35:32.139Z",
  "reliability_band": "strong",
  "location_precision_band": "approximate",
  "time_precision_band": "within_24h",
  "severity_band": "significant",
  "attribution_confidence_band": "high",
  "attribution_basis": "single_source"
}