2026 Lucid Motors — Sovcali ransomware leak-site claim; ~5TB engineering archive (unverified)
Data compromised
Actor-claimed (unverified): ~5.078 TB CATIA/STEP models, FEA/NVH/CFD analyses, BOMs, internal reports; GalaxyWarden notes password fields in samples — no SSNs/DL claimed in reviewed summary; customer census not attested
Technical writeup
Unverified ransomware / leak-site claim — August 8–9, 2026 monitors (GalaxyWarden, SOCRadar). Extortion group Sovcali listed Lucid Motors (lucidmotors.com), quoting a claim of roughly 5.078 terabytes of engineering archives for Lucid and eShocan — CATIA/STEP models, FEA/NVH analyses, CFD simulations, topology studies, BOMs, and internal progress reports — with talk of releasing tens of GB as proof. GalaxyWarden labels the listing unverified and notes Lucid had not publicly confirmed; sample discussion mentions password fields without government-ID categories in the reviewed writeup. recordsAffected 0 — no attested individual customer census (IP/engineering-focused claim). Distinct from Lucid Software Salesloft/Drift CRM incidents.
Root cause
Unverified Sovcali ransomware leak-site listing (~Aug 8–9, 2026) claiming Lucid Motors / eShocan engineering archive; Lucid had not confirmed