NASCAR confirms user data breach following Medusa ransomware attack

• NASCAR files reports with state regulators confirming April 2025 attack

• The company is offering free credit monitoring for affected victims

NASCAR has confirmed it suffered a cyberattack and a data breach in April 2025 which saw personal information of racing fans allegedly stolen. 

In April 2025, the group added NASCAR to its data leak site and demanded $4 million in ransom. Ransomware operators known as Medusa had claimed responsibility several months ago.