Automotive IT Firm Hyundai AutoEver Discloses Data Breach

Hyundai AutoEver America, the North American arm of the South Korean automotive IT services firm, disclosed a data breach resulting from a hacker attack that targeted the company earlier this year. The breach affected Hyundai AutoEver America (HAEA), based in Orange County, California, with intrusions detected on 1 March 2025 after attackers had access to systems since 22 February 2025; the company said the intruders were expelled by 2 March 2025.

The investigation found that the threat actor accessed personal information stored on compromised systems, though Hyundai AutoEver America could not confirm whether data was exfiltrated. Exposed information includes names, Social Security numbers, and driver’s licence numbers, with notices submitted to authorities in several states.

In Maine, one individual was impacted, and in Massachusetts seven people were affected; Hyundai AutoEver has not disclosed the total number of affected individuals, but the disclosures suggest a relatively small impact overall. It remains unclear who was behind the attack, and no known ransomware group appears to have taken credit.