D’Ambrosio Dodge Data Breach Exposes Customer and Employee Personal Information D’Ambrosio Dodge Inc., an automotive dealership in Downingtown, Pennsylvania, disclosed a data breach affecting the personal information of customers and employees. The incident was first detected on November 24, 2025, when unusual activity was identified in the company’s computer systems. An investigation was launched, and a third-party forensic firm was engaged to assess the scope of the breach. On December 12, 2025, the ransomware group Qilin claimed responsibility, posting on the Tor network that it had obtained data from the Jeff D’Ambrosio Auto Group. The forensic investigation concluded on January 21, 2026, identifying potentially compromised files, with a detailed review confirming the exposure of personal data by March 16, 2026. The breach exposed sensitive information, including names, addresses, and government ID numbers. While the exact number of affected individuals was not disclosed, the company notified regulators in Maine and Vermont on May 5, 2026, and sent written notices to impacted consumers the same day. In response, D’Ambrosio Dodge offered free identity theft protection services through IDX, including credit monitoring, CyberScan monitoring, a $1 million insurance reimbursement policy, and identity recovery assistance. Affected individuals were given 12 or 24 months of coverage, with enrollment available until August 5, 2026. The company also advised monitoring financial accounts for suspicious activity.