Cox Automotive confirms suspicious activity on VinSolutions dealership CRM after Scarlett Group data theft claim
Teaser from the source
Cox Automotive confirmed on Oct 26 2026 that it detected suspicious activity limited to VinSolutions, its CRM platform for car dealerships (used by about 7,000 dealerships, per Auto Remarketing). Cox says the activity was quickly contained, involved no encrypting malware and did not disrupt the service, that it is working with outside cyber experts, and that it believes a limited subset of VinSolutions dealers was affected and will notify them directly. The statement followed a listing by a newly active group calling itself Scarlett Group on its leak site on Oct 23, which claims customer records including Social Security numbers, driver's license numbers and credit applications. Cox has not confirmed those claims, the number of dealers or consumers involved, or what data was taken.
This is the RSS-feed teaser. Read the full article at the original source.
Read at pwn.watchSource: https://pwn.watch/i/cox-automotive-vinsolutions-dealer-crm-incident-oct-2026