Revolution Parts, an Arizona-based e-commerce platform specializing in automotive parts and accessories, suffered a cyberattack resulting in the exfiltration of sensitive customer data. Over 5.1 million customers had their personal information compromised, including full names, phone numbers, email addresses, IP addresses, home addresses, and device details. The breach likely originated from account setup pages and purchase forms, exposing users to risks such as targeted scams, identity profiling, and future fraud.The stolen data could enable threat actors to launch device-specific phishing attacks or targeted intrusions, particularly against automotive OEMs (Original Equipment Manufacturers) that rely on Revolution Parts’ services. Researchers also warned that attackers might be selling outdated information to mislead other cybercriminal groups, further complicating the threat landscape. The incident underscores the severe risks of large-scale customer data exposure in e-commerce platforms, where personal and device-level details can be weaponized for financial and operational exploitation.