Thought Leadership
Market data specialist Autovista is battling a major ransomware attack that has knocked out critical IT systems across Europe and Australia, causing widespread disruption to vehicle valuations and identification services.
Autovista, one of the world’s most influential players in vehicle valuations and market analysis, has confirmed it is the target of a coordinated ransomware attack. The British company stated that core IT systems in Europe and Australia have been affected. The fallout is significant: as the parent company of industry heavyweights Eurotax, Glass’s, and Schwacke, Autovista underpins vehicle pricing and identification across the entire European market. As part of the global data giant J.D. Power, it plays a pivotal role in valuing billions of dollars’ worth of assets in the automotive sector.
A disciplined response to the encryption
Autovista’s leadership acted swiftly, initiating comprehensive security measures and acknowledging the severity of the incident in an official statement:
“We are responding to a ransomware incident affecting certain Autovista systems in Europe and Australia. We have engaged external experts to conduct a thorough investigation and assist us in fully containing the incident. We know that getting this resolved quickly is important to you. Our top priority is to securely restore impacted applications, although we do not have a firm timeline on this yet. We will keep our customers informed, to the extent our investigation uncovers additional relevant information. We will also provide an update on timing when we have that information. Of note, some Autovista employees’ access to their email has been temporarily disrupted due to this incident. As such, please continue to check this page for the latest updates. We appreciate our customers’ patience as we work to respond to this incident in a disciplined manner.”
Third-party cybersecurity specialists have been brought in to work alongside internal IT teams to trace the attack’s origin and contain the spread of the malware. The investigation remains ongoing, with the company prioritizing the isolation of affected network segments over speed of recovery.
Internal operations and communications hit hard
Beyond customer-facing services, Autovista’s internal infrastructure has also taken a serious hit. Many employees have been temporarily locked out of their business email accounts, a precautionary measure to prevent further malware propagation, though one that also complicates coordination of the recovery effort.
The outage is particularly damaging for automotive dealers and insurers, who rely on Autovista’s tools to determine residual values, analyze total cost of ownership, and identify precise vehicle specifications throughout a car’s lifecycle. The systems going dark has led to immediate delays in sales negotiations, appraisals, and leasing contracts. No firm timeline for a full restoration has been provided, with the company stressing that security takes precedence over speed.
The strategy behind the attack
No ransomware group has yet claimed responsibility. However, the current threat landscape shows a clear pattern of criminal gangs targeting companies whose data is critical to global supply chains. Autovista’s strategic importance makes it a highly attractive target, as the automotive industry’s deep dependence on its data creates enormous pressure to reach a quick settlement.
The incident once again highlights the vulnerability of specialized data providers. Forensic teams are currently investigating whether the attack also involved data theft. In modern ransomware campaigns, attackers frequently threaten to publish sensitive information on the dark web if their demands are not met.
Advice for customers and partners
Users of the Autovista, Eurotax, and Schwacke platforms are urged to stay vigilant. Security experts warn that attackers could exploit the disrupted email systems to launch phishing campaigns. Official updates should only be sourced from the company’s verified status page.
A prolonged outage of market data could significantly destabilize pricing transparency in the used car sector. The coming days will be critical in determining how resilient Autovista’s backup strategies truly are and whether a full recovery without data loss is achievable.
