How Sextortion Scams on Employee Phones Threaten Dealership Networks

Terry Dortch President, Automotive Risk Management Partners

Key takeaways

  • Sextortion is a scheme where hackers find compromising personal activity, such as visits to sex sites or shared explicit images, and use it to extort money from the individual.
  • Personal phones used by employees can indirectly affect a dealership's network security even though the scam targets the individual, not the store directly.
  • Dealerships need processes and procedures in place to protect every device connected to their network, including employee phones.
  • The risk from phone-based scams and AI-driven threats is expected to grow more complex and widespread over time.
  • Terry Dortch of Automotive Risk Management Partners offers to help dealerships address device-related security issues.

Summary

Every device connected to a dealership's network, including employee phones, represents a potential entry point for cyber threats, not just computers and servers. The video raises the example of "sextortion," where hackers uncover compromising personal material, such as visits to sex sites or explicit photos sent to a partner, and use it to extort money from the individual. That kind of personal compromise on a phone that also connects to dealership systems can create a path into the store's network without anyone realizing it.

For a dealership, the practical takeaway is that device-level risk cannot be ignored just because a phone or laptop seems personal or unrelated to daily operations. Dortch stresses that stores need processes and procedures in place to protect every device tied to the network, and that failing to do so creates problems that will only grow as phone use and AI technology become more widespread and complex. Dealerships should treat personal device security as part of their overall network protection plan, not a separate issue.

Transcript

Introduction to sextortion scams

Hi, my name is Terry Dortch. I'm with Automotive Risk Management Partners. You know, I came across an article the other day which kind of baffled me initially, and then after I read it I went, "Boy, does that make sense." Right? And the article was on sextortion. Sextortion, what does that mean? Well, that's what I had to say. I said, "What does that mean?" Well, it means that hackers will go in and find things that are going on with an individual, where they're maybe going to sex sites, or they're sending sexual pics to their significant others or whatever, and then what the hackers do is they find that and they use that against the individual in order to, you know, put some sort of monetary price to it, right? So, almost like a, almost like a ransom in a sense.

Impact on dealership network security

My whole point in all of this is this is going on with phones that are in your dealership, indirectly, that can come in and affect your store. You need to have processes and procedures in place to protect every device that's connected to your network. If you're not putting something in place to do that, you've got problems, and it's only going to get worse. These phones, and this technology, AI, the whole thing, is only going to become more and more convoluted, profound, large.

Call to action for assistance

Anyway, give us a call. We can help you address these issues. There issues that you need to think about. Thanks. Our information is right here on the screen. Take care.

Questions this video answers

What is sextortion and why should a dealership care about it?

Sextortion is when hackers find compromising personal information, like visits to sex sites or shared explicit pictures, and use it to demand money from the individual, similar to a ransom. It matters to dealerships because this can happen through phones connected to the dealership network, indirectly affecting the store.

Do we need to worry about employee personal phones as a security risk?

Yes. According to the transcript, personal phone activity like sextortion scams can indirectly affect your dealership, so you need processes and procedures in place to protect every device that connects to your network.

Is this type of threat going to get worse over time?

The transcript states that phone-related threats and AI technology are only going to become more convoluted, profound, and large, meaning dealerships should expect these issues to grow rather than diminish.

  • Dealership Cybersecurity Requirements

    A US auto dealership's cybersecurity requirements come primarily from the FTC Safeguards Rule, which mandates multi-factor authentication, encryption of custome...

Covered in this video

  • Sextortion
  • Network device security
  • AI-driven threats