Karl Auto Group Data Breach Exposes Sensitive Customer Information Karl Auto Group, a regional automotive dealer group based in Ankeny, Iowa, confirmed a data breach after an unauthorized third party accessed its computer systems. The company, which operates multiple dealerships selling brands like Chevrolet, GMC, and Jeep, first detected the incident on April 4, 2026, though the breach occurred prior to March 27, 2026. The attack disrupted phone and computer systems across its dealerships, leading to operational disruptions. A third-party forensic cybersecurity firm is investigating the incident, which has exposed sensitive customer data, including: - Full names - Social Security numbers - Driver’s license and government-issued ID numbers - Financial account information - Passport numbers and images The law firm Shamis & Gentile P.A. is reviewing potential legal claims for affected individuals, who may be eligible for compensation. The investigation remains ongoing.