Automotive technology data breaches expose connected-vehicle telematics data, dealership customer records, financing and payment information, and employee personal details. As vehicles and dealerships rely more heavily on cloud-connected systems, over-the-air updates, and third-party software vendors, the attack surface for this industry has grown substantially in recent years. Common causes include ransomware attacks on dealership management systems, breaches at third-party finance or service providers, and unauthorized access to vehicle telematics platforms. These breaches can trigger identity theft, financial fraud, and privacy risks tied to vehicle location, driving behavior, or usage data being exposed to unauthorized parties. Affected individuals may include car buyers, service customers, dealership employees, and drivers whose vehicles report data to a manufacturer or third-party platform. This page tracks confirmed data breaches at automotive technology companies and dealerships, including what data was exposed, when the breach was discovered, which companies notified state or federal regulators, and what steps affected individuals can take next, including how to determine eligibility for a data breach claim.
General Motors has agreed to pay $220 million after a multistate investigation found it sold drivers’ location and driving behavior data to brokers and insurers without proper consent.
General Motors Data Breach Exposes Driving Behavior and Location Data Read More »
Toyo Tire Holdings of Americas Inc. notified the California Attorney General of a data breach that may have exposed personal information belonging to affected individuals.
Toyo Tire Holdings of Americas Inc. Data Breach Exposes Personal Information Read More »
A ransomware group has posted claims online about an alleged attack on Performance Ford Inc, an automotive retailer. The company has not publicly confirmed the incident.
Performance Ford Inc Data Breach Claim: Personal Information Reportedly Exposed Read More »
A threat actor group has claimed responsibility for a cyberattack on Turn5, an auto parts company, allegedly stealing hundreds of gigabytes of internal files.
Turn5 Data Breach Exposes Company Files and Business Records Read More »
Carvana notified customers that a document containing their personal information, including driver’s license numbers and home addresses, was inadvertently disclosed in September 2026.
Carvana Data Breach Exposes Driver’s License Numbers and Personal Records Read More »
American Service Center Associates, LLC notified the Vermont Attorney General that a data breach exposed government ID numbers belonging to an undisclosed number of individuals.
American Service Center Associates Data Breach Exposes Government ID Numbers Read More »
McCarthy Tire Service, one of the largest independent commercial tire dealers in the US, suffered a ransomware attack by the threat group that may have exposed sensitive personal data.
McCarthy Tire Service Data Breach Exposes Employee and Customer Personal Information Read More »
Johnson City Honda suffered a ransomware attack claimed by the Global Secret Group, with attackers alleging theft of nearly 33 GB of files. The full scope of exposed personal data has not yet been publicly disclosed.
Johnson City Honda Data Breach Exposes Customer Files and Business Records Read More »
Perruzi Buick GMC, Inc. notified regulators that a data breach compromised customer Social Security numbers and health records, raising the risk of identity theft and fraud.
Perruzi Buick GMC, Inc. Data Breach Exposes Social Security Numbers and Health Records Read More »
Sam Pack Auto Group, a Texas-based auto dealership network, suffered a ransomware attack linked to the group, raising concerns about exposed customer and employee data.
Sam Pack Auto Group Data Breach Exposes Personal and Financial Information Read More »