A Sydney woman's Tesla was remotely accessed and controlled by her abusive ex-partner, who manipulated vehicle systems including speed, temperature, and locks as part of a year-long harassment campaign.
Enrico Pucci, a disgraced businessman, gained remote access to his former partner's electric vehicle while she was attempting to escape a four-year domestic abuse situation. The woman, identified as Stacey, first noticed something amiss when her car alarm sounded multiple times in the middle of the night.
Frightened by the disturbances, Stacey remained inside her home, fearing Pucci was outside damaging the vehicle. However, investigators later determined he was controlling the car remotely from a distance, demonstrating the vulnerability of connected vehicle technology to abuse.
Pucci's actions extended beyond triggering the alarm. He manipulated the Tesla's climate control systems and accessed locking mechanisms, giving him the ability to monitor and interfere with the vehicle's operation at will. This digital intrusion added another layer of control to the harassment campaign, keeping his former partner in a constant state of anxiety and fear.
The case highlights a growing security concern as vehicles become increasingly connected to the internet and mobile networks. Tesla's remote access features, designed for owner convenience, can become tools of harassment when credentials fall into the wrong hands—particularly in domestic abuse situations where abusers often have access to personal information and login credentials.
Domestic abuse advocates have raised alarms about connected technology being weaponized in abusive relationships. Smart home devices, phones, and now vehicles can all be exploited to track, monitor, and harass victims. The Tesla incident underscores the need for stronger security protocols, better authentication methods, and awareness campaigns about digital abuse.
Stacey's experience prompted police to investigate, leading to charges against Pucci. The case serves as a cautionary tale for both technology companies and users about the importance of robust security measures and the potential dangers of shared access credentials in relationships at risk of becoming abusive.
Two major US law firms have fallen victim to cyber extortion attacks, with threat actors obtaining and publishing private client documents. The incidents highlight ongoing security vulnerabilities in the legal sector.
U.S. cybersecurity and intelligence agencies have identified six Chinese AI companies conducting large-scale distillation attacks on American frontier AI models since late 2024, extracting billions of tokens in the process.
Healthcare technology company Veradigm disclosed a data breach after a ransomware attack on a third-party vendor exposed patient personal information. A cybersecurity incident at the vendor compromised data stored on Veradigm's systems.
While multi-factor authentication strengthens account security, attackers are increasingly exploiting password recovery and authentication reset processes. Stronger identity verification at service desks is now critical to block social engineering attacks.