Northeast Ohio Car Dealership Data Breach Exposes Customer and Employee Information A data breach at Progressive Auto Group, a car dealership in Massillon, Ohio, has potentially exposed the personal information of customers and employees, including a former mechanic who purchased a vehicle from the dealership. Aaron Lucarelli received a notification letter dated December 29, confirming that an unauthorized actor accessed the company’s network and exfiltrated files containing sensitive data. The breach, detected on December 18, may have compromised names, Social Security numbers, driver’s license numbers, passport details, and financial account information, including debit and payment card numbers. Progressive Auto Group is offering affected individuals one year of free credit monitoring through EquiPrivacy ID Solutions to help detect potential identity theft. Lucarelli, who worked at the dealership before buying a car there, described the experience as unsettling, prompting him to contact all three major credit bureaus and monitor his accounts for suspicious activity. While he has not yet observed any fraudulent transactions, he expressed ongoing concerns about the long-term risks of the exposure. Cybersecurity experts, including Alex Hammerstone of TrustedSec, noted that such breaches are increasingly common and often preventable with basic security measures. The incident underscores the growing threat of unauthorized data access in businesses handling sensitive customer information. Individuals who suspect identity theft can report fraud to the Federal Trade Commission (FTC) for assistance.