Hyundai AutoEver America LLC (HAEA), an IT and software solutions provider for Hyundai Motor Group (including Kia and Genesis in North America), suffered a data breach exposing the sensitive personal information of approximately 2.7 million individuals. The compromised data included Social Security numbers and driver’s license numbers, which are highly sensitive identifiers. The breach was detected after unauthorized access to HAEA’s network, though the exact method (e.g., phishing, vulnerability exploitation) remains undisclosed. HAEA’s services—such as vehicle telematics, over-the-air updates, and autonomous driving systems—rely heavily on secure data handling, making this incident particularly critical. The exposure of such personal data poses severe risks, including identity theft, financial fraud, and long-term reputational damage to both HAEA and its parent company, Hyundai Motor Group. The breach has already led to a federal lawsuit, underscoring its legal and operational consequences.

Hyundai AutoEver America, a technology services provider for the Hyundai Motor Group, suffered a cybersecurity breach where an unauthorized actor infiltrated its network and exfiltrated personally identifiable information (PII) of millions of individuals. The compromised data includes names combined with drivers’ license numbers and Social Security numbers, exposing victims to severe risks of identity theft, financial fraud, and long-term reputational harm. The incident has prompted a class-action investigation by Lynch Carpenter LLP, a law firm specializing in data privacy litigation, indicating potential legal and financial liabilities for Hyundai. The breach underscores systemic vulnerabilities in Hyundai’s cybersecurity defenses, eroding customer trust and potentially triggering regulatory scrutiny. Affected individuals may seek compensation for damages, amplifying the company’s financial and operational burdens. The scale of the breach—impacting millions—suggests a large-scale data leak with cascading consequences for both the company and its customers, including prolonged remediation efforts, credit monitoring costs, and reputational repair.

A class action lawsuit was filed against Hyundai Auto Ever America LLC for failing to secure the personal identifying information (PII) of 2.7 million individuals, including full names, Social Security numbers, and driver’s license numbers. The breach occurred due to alleged inadequate cybersecurity measures, with the company reportedly aware of the incident since March 2025 but delaying notifications until October 2025. The plaintiff, Gretchen Benedettini, claims the company recklessly maintained and transmitted PII in a vulnerable state, leading to unauthorized access. The lawsuit alleges negligence, breach of implied contract, and unjust enrichment, seeking compensatory, consequential, and nominal damages for affected individuals. The breach exposed sensitive data entrusted to Hyundai, raising concerns over identity theft, financial fraud, and long-term reputational harm for the company and its subsidiaries (Hyundai, Kia, Genesis).

Hackers infiltrated Hyundai AutoEver America’s (HAEA) systems between February and March 2025, gaining unauthorized access for nine days before detection. The breach exposed sensitive personal data of approximately 2,000 customers, including names, Social Security numbers, and driver’s license details, though the company could not confirm if the data was exfiltrated. HAEA, a digital subsidiary of Hyundai Motor Group managing software for Hyundai, Kia, and Genesis vehicles, serves 2.7 million users, but the impact was limited to a small subset. The incident prompted an external cybersecurity investigation, two years of free credit monitoring for affected individuals, and a dedicated hotline for support.The breach underscores escalating risks in automotive cybersecurity, particularly as modern vehicles collect vast amounts of driver data (e.g., location history, payment info). While HAEA downplayed the scale, the exposure of personally identifiable information (PII)—even for a limited group—raises concerns about data protection practices across the industry, especially following regulatory actions like the FTC’s ban on GM’s driver data sales and Senate scrutiny of automakers’ privacy policies.

Hyundai AutoEver America (HAEA), the North American IT subsidiary of Hyundai, suffered a cyberattack in early 2025 that lasted over a week (February 22 – March 2). The breach exposed sensitive customer data, including Social Security numbers (SSNs) and driver’s license information, putting at least 2.7 million vehicle owners (Hyundai, Kia, Genesis) at risk of identity theft and financial fraud. While the exact number of affected individuals remains unclear, Massachusetts reported 7 residents impacted, and California’s Attorney General website suggests over 500 Californians were affected, triggering mandatory breach notifications.The attack enabled threat actors to create detailed victim profiles for fraud, including fake identities and financial exploitation. HAEA claimed to have hardened security, engaged third-party experts, and notified law enforcement. This marks Hyundai’s second major breach in two years, following a 2024 ransomware attack by Black Basta, which stole 3TB of data from Hyundai Motor Europe. The incident underscores systemic vulnerabilities in Hyundai’s cybersecurity posture, with repeated exposures of high-value personal data.

Hyundai suffered a major data breach in February 2024, disclosed months later after a prolonged investigation. Hackers infiltrated Hyundai AutoEver America (HAEA), the digital backbone for Hyundai, Kia, and Genesis in North America, gaining unrestricted access for nine days (February 22–March 2). The breach exposed highly sensitive customer data, including full names, Social Security numbers (SSNs), and driver’s license information—critical identifiers for identity theft and fraud. HAEA’s systems, which manage dealership operations, remote vehicle software, and customer purchase processing, were compromised, allowing attackers to exfiltrate data undetected. This marks Hyundai’s third major security incident in three years, highlighting systemic vulnerabilities in its digital infrastructure. The delayed disclosure underscores the severity, as victims remained unaware while their data circulated in criminal networks. The breach’s scale and the nature of stolen data pose long-term risks, including financial fraud, phishing, and reputational damage to Hyundai’s brand trust.

A cyber breach at Hyundai AutoEver America (HAEA), the IT services division supporting Hyundai, Kia, and Genesis, exposed the personal data of up to 2.7 million U.S. vehicle owners in March 2025. Hackers gained unauthorized access to HAEA’s IT environment, compromising sensitive information—including Social Security numbers (SSNs), driver’s license details, names, and potentially other identifiers—linked to over 2 million users and nearly 3 million vehicles. The stolen data heightens risks of identity theft, financial fraud, and long-term reputational damage to Hyundai’s connected vehicle ecosystem. While the exact victim count remains unclear, state filings in Massachusetts and Maine confirm broad exposure. HAEA has initiated customer notifications and credit monitoring, but criticism persists over delayed transparency and systemic vulnerabilities in automotive IT infrastructure. The breach follows a 2023 incident affecting European customers, reinforcing concerns about recurring security gaps in the sector. Legal firms are exploring class-action lawsuits, and regulators may impose penalties under laws like CCPA.

Hyundai AutoEver America (HAEA), the IT division of Hyundai Motor Group, suffered a massive data breach between February 22 and March 2, 2025, compromising the personal data of up to 2.7 million customers, including those of Hyundai, Kia, and Genesis. The stolen information includes names, Social Security Numbers (SSNs), driver’s license numbers, addresses, and phone numbers—highly sensitive data that can be exploited for identity theft, phishing, and financial fraud. While HAEA claims to have blocked network access during the attack, the delay in notifying affected customers (letters sent in October 2025, seven months later) raises concerns about transparency and incident response. The breach also risks cross-referencing stolen data with other leaked databases, enabling cybercriminals to craft targeted phishing attacks to extract further credentials or funds. HAEA has offered two years of free credit monitoring via Epiq (a firm that itself suffered a ransomware attack in 2020), but the recurring nature of such incidents—including prior Hyundai breaches in 2023 and 2024—highlights systemic vulnerabilities in the automaker’s cybersecurity posture. The breach’s scale and the sensitivity of the exposed data pose long-term reputational and financial risks for customers and the company.