Automotive technology data breaches expose connected-vehicle telematics data, dealership customer records, financing and payment information, and employee personal details. As vehicles and dealerships rely more heavily on cloud-connected systems, over-the-air updates, and third-party software vendors, the attack surface for this industry has grown substantially in recent years. Common causes include ransomware attacks on dealership management systems, breaches at third-party finance or service providers, and unauthorized access to vehicle telematics platforms. These breaches can trigger identity theft, financial fraud, and privacy risks tied to vehicle location, driving behavior, or usage data being exposed to unauthorized parties. Affected individuals may include car buyers, service customers, dealership employees, and drivers whose vehicles report data to a manufacturer or third-party platform. This page tracks confirmed data breaches at automotive technology companies and dealerships, including what data was exposed, when the breach was discovered, which companies notified state or federal regulators, and what steps affected individuals can take next, including how to determine eligibility for a data breach claim.
A threat actor group has claimed responsibility for a cyberattack on Turn5, an auto parts company, allegedly stealing hundreds of gigabytes of internal files.
Turn5 Data Breach Exposes Company Files and Business Records Read More »
Carvana notified customers that a document containing their personal information, including driver’s license numbers and home addresses, was inadvertently disclosed in September 2026.
Carvana Data Breach Exposes Driver’s License Numbers and Personal Records Read More »
American Service Center Associates, LLC notified the Vermont Attorney General that a data breach exposed government ID numbers belonging to an undisclosed number of individuals.
American Service Center Associates Data Breach Exposes Government ID Numbers Read More »
McCarthy Tire Service, one of the largest independent commercial tire dealers in the US, suffered a ransomware attack by the Storm threat group that may have exposed sensitive personal data.
McCarthy Tire Service Data Breach Exposes Employee and Customer Personal Information Read More »
Johnson City Honda suffered a ransomware attack claimed by the Global Secret Group, with attackers alleging theft of nearly 33 GB of files. The full scope of exposed personal data has not yet been publicly disclosed.
Johnson City Honda Data Breach Exposes Customer Files and Business Records Read More »
Perruzi Buick GMC, Inc. notified regulators that a data breach compromised customer Social Security numbers and health records, raising the risk of identity theft and fraud.
Perruzi Buick GMC, Inc. Data Breach Exposes Social Security Numbers and Health Records Read More »
Sam Pack Auto Group, a Texas-based auto dealership network, suffered a ransomware attack linked to the Play group, raising concerns about exposed customer and employee data.
Sam Pack Auto Group Data Breach Exposes Personal and Financial Information Read More »
Nissan North America, Inc. notified the Vermont Attorney General that a data breach exposed Social Security numbers, financial account codes, and credit and debit account information belonging to affected individuals.
A ransomware group claims to have stolen over 500 GB of data from Long-Lewis Automotive Group, including personal records of customers and employees along with financial documents.
Long-Lewis Automotive Group Data Breach Exposes Customer and Employee Personal Data Read More »
CB Squared Services, Inc., a Jiffy Lube franchise operator based in Virginia, has notified regulators that hackers accessed its network and stole files containing customer names and Social Security numbers.
CB Squared Services Data Breach Exposes Names and Social Security Numbers Read More »