Skip to content
VinSolutions Security Incident Could Impact Dealers Significantly

VinSolutions Security Incident Could Impact Dealers Significantly

First seen 28 Oct 2026, 21:07 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 28, 2026 at 22:08 UTC
  • •Cox Automotive confirmed suspicious activity within VinSolutions on October 26, 2026.
  • •Dealers may be liable under the FTC's Safeguards Rule if customer data is compromised.
  • •Affected dealers will be notified directly by Cox Automotive.

Cox Automotive reported suspicious activity within VinSolutions, which may have exposed unencrypted customer data. Under the FTC's Safeguards Rule, dealers are responsible for their vendors' security, meaning they could face significant repercussions if customer information is compromised. Attorney Steven Lefkoff highlighted that even a small number of credit applications could exceed the 500-person threshold for mandatory FTC notification. Cox Automotive stated that the incident affected a limited subset of VinSolutions dealers and will notify those impacted directly. The full scope of the incident remains unclear, but dealers are advised to audit their vendor relationships and security practices to mitigate potential risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-26
Cox Automotive reports suspicious activity
Cox Automotive acknowledged suspicious activity within VinSolutions, which was quickly contained. The incident may impact dealers' responsibilities regarding customer data.
Autoremarketing

More articles in this cluster (2)

Following this threat?

Track CDK Global in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 3

Common questions

What should dealers do in response?
Dealers should audit their vendor contracts and security practices to ensure compliance with the Safeguards Rule.
How many dealers are affected?
Cox Automotive indicated that the incident affected a limited subset of VinSolutions dealers.
What are the potential consequences for dealers?
Dealers could face liability and must notify the FTC if customer data of 500 or more individuals is compromised.