Automotive technology data breaches expose connected-vehicle telematics data, dealership customer records, financing and payment information, and employee personal details. As vehicles and dealerships rely more heavily on cloud-connected systems, over-the-air updates, and third-party software vendors, the attack surface for this industry has grown substantially in recent years. Common causes include ransomware attacks on dealership management systems, breaches at third-party finance or service providers, and unauthorized access to vehicle telematics platforms. These breaches can trigger identity theft, financial fraud, and privacy risks tied to vehicle location, driving behavior, or usage data being exposed to unauthorized parties. Affected individuals may include car buyers, service customers, dealership employees, and drivers whose vehicles report data to a manufacturer or third-party platform. This page tracks confirmed data breaches at automotive technology companies and dealerships, including what data was exposed, when the breach was discovered, which companies notified state or federal regulators, and what steps affected individuals can take next, including how to determine eligibility for a data breach claim.
Yorozu Automotive Tennessee Inc. disclosed a data breach affecting 20,627 individuals, exposing Social Security numbers, financial account information, and medical records.
Yorozu Automotive Data Breach Exposes Social Security Numbers and Medical Records Read More »
Peruzzi Auto Group suffered a ransomware attack by the Qilin cybercriminal group around February 27, 2025, resulting in theft of roughly 60GB of company data, some containing sensitive personal information. Customers, employees, and other individuals whose data was stored on the network may be affected. Anyone who received a notification letter should read it carefully
An unauthorized party accessed OEConnection's servers and viewed files between March 5-6, 2026, potentially exposing names, addresses, Social Security numbers, and financial information. At least 283 Texas residents were confirmed affected, with additional victims likely nationwide. OEConnection began mailing notification letters June 8, 2026. Anyone who receives one should read it carefully and immediately place