Automotive technology data breaches expose connected-vehicle telematics data, dealership customer records, financing and payment information, and employee personal details. As vehicles and dealerships rely more heavily on cloud-connected systems, over-the-air updates, and third-party software vendors, the attack surface for this industry has grown substantially in recent years. Common causes include ransomware attacks on dealership management systems, breaches at third-party finance or service providers, and unauthorized access to vehicle telematics platforms. These breaches can trigger identity theft, financial fraud, and privacy risks tied to vehicle location, driving behavior, or usage data being exposed to unauthorized parties. Affected individuals may include car buyers, service customers, dealership employees, and drivers whose vehicles report data to a manufacturer or third-party platform. This page tracks confirmed data breaches at automotive technology companies and dealerships, including what data was exposed, when the breach was discovered, which companies notified state or federal regulators, and what steps affected individuals can take next, including how to determine eligibility for a data breach claim.
Johnson City Honda suffered a ransomware attack claimed by the Global Secret Group, with attackers alleging theft of nearly 33 GB of files. The full scope of exposed personal data has not yet been publicly disclosed.
Johnson City Honda Data Breach Exposes Customer Files and Business Records Read More »
Perruzi Buick GMC, Inc. notified regulators that a data breach compromised customer Social Security numbers and health records, raising the risk of identity theft and fraud.
Perruzi Buick GMC, Inc. Data Breach Exposes Social Security Numbers and Health Records Read More »
Sam Pack Auto Group, a Texas-based auto dealership network, suffered a ransomware attack linked to the Play group, raising concerns about exposed customer and employee data.
Sam Pack Auto Group Data Breach Exposes Personal and Financial Information Read More »
Nissan North America, Inc. notified the Vermont Attorney General that a data breach exposed Social Security numbers, financial account codes, and credit and debit account information belonging to affected individuals.
A ransomware group called Dark Project claims to have stolen over 500 GB of data from Long-Lewis Automotive Group, including personal records of customers and employees along with financial documents.
Long-Lewis Automotive Group Data Breach Exposes Customer and Employee Personal Data Read More »
CB Squared Services, Inc., a Jiffy Lube franchise operator based in Virginia, has notified regulators that hackers accessed its network and stole files containing customer names and Social Security numbers.
CB Squared Services Data Breach Exposes Names and Social Security Numbers Read More »
Henna Chevrolet, an Austin car dealership, disclosed that a data breach exposed Social Security numbers, driver’s license numbers, financial data, and medical information belonging to 2,662 customers.
Henna Chevrolet Data Breach Exposes Social Security Numbers and Medical Information Read More »
Hackers known as ShinyHunters claimed responsibility for a breach of car-shopping platform Edmunds, later publishing data on roughly 178,000 users including passwords, phone numbers and vehicle records.
Edmunds Data Breach Exposes Passwords, Phone Numbers and Vehicle Records Read More »
A data breach at CarGurus, linked to the extortion group ShinyHunters, exposed over 12 million email addresses along with names, phone numbers, physical addresses, and auto finance application data.
CarGurus Data Breach Exposes Emails, Addresses and Finance Application Data Read More »
Peruzzi Buick GMC disclosed a ransomware attack by the Qilin group that exposed Social Security numbers, driver’s licenses and health records of 5,450 people.
Peruzzi Buick GMC Data Breach Exposes SSNs and Driver’s Licenses Read More »