Peruzzi Buick GMC Discloses 2025 Ransomware Attack Exposing Sensitive Customer Data Peruzzi Buick GMC Inc., a Buick and GMC dealership in Fairless Hills, Pennsylvania, reported a ransomware attack that began in early 2025. The breach was first detected on February 27, 2025, when unauthorized access to the dealership’s network was identified. The attack was attributed to the Qilin ransomware group, which claimed responsibility on March 4, 2025, via a post on the Tor network. Qilin asserted it had exfiltrated 60 GB of data, providing sample screenshots as proof, and threatened to release the full dataset on March 11, 2025. An investigation concluded on June 22, 2026 over 15 months after the initial intrusion that the compromised files contained personally identifiable information (PII) and protected health information (PHI), including full names, Social Security numbers, driver’s licenses, and health records. Peruzzi Buick disclosed the breach to the attorneys general offices of Massachusetts and Vermont. In response, the dealership offered affected individuals a complimentary membership to Experian IdentityWorks and directed them to Federal Trade Commission (FTC) identity theft prevention resources. Notification letters with activation instructions were mailed to impacted parties.