{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Cox Automotive confirms suspicious activity on VinSolutions dealership CRM after Scarlett Group data theft claim · updates",
  "home_page_url": "https://pwn.watch/i/cox-automotive-vinsolutions-dealer-crm-incident-oct-2026",
  "feed_url": "https://pwn.watch/i/cox-automotive-vinsolutions-dealer-crm-incident-oct-2026/feed.json",
  "description": "Cox Automotive confirmed on Oct 26 2026 that it detected suspicious activity limited to VinSolutions, its CRM platform for car dealerships (used by about 7,000 dealerships, per Auto Remarketing). Cox says the activity was quickly contained, involved no encrypting malware and did not disrupt the service, that it is working with outside cyber experts, and that it believes a limited subset of VinSolutions dealers was affected and will notify them directly. The statement followed a listing by a newly active group calling itself Scarlett Group on its leak site on Oct 23, which claims customer records including Social Security numbers, driver's license numbers and credit applications. Cox has not confirmed those claims, the number of dealers or consumers involved, or what data was taken.",
  "language": "en",
  "_pwn": {
    "slug": "cox-automotive-vinsolutions-dealer-crm-incident-oct-2026",
    "severity": "medium",
    "status": "live",
    "patchStatus": "partial",
    "rss": "https://pwn.watch/i/cox-automotive-vinsolutions-dealer-crm-incident-oct-2026/feed.xml",
    "llms": "https://pwn.watch/i/cox-automotive-vinsolutions-dealer-crm-incident-oct-2026/llms.txt",
    "json": "https://pwn.watch/i/cox-automotive-vinsolutions-dealer-crm-incident-oct-2026.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/cox-automotive-vinsolutions-dealer-crm-incident-oct-2026#2026-10-27-7dc00db1",
      "url": "https://pwn.watch/i/cox-automotive-vinsolutions-dealer-crm-incident-oct-2026#2026-10-27-7dc00db1",
      "title": "Cox Automotive confirms suspicious activity on VinSolutions dealership CRM after Scarlett Group data theft claim: NIADA, the independent dealers' association, says Cox believes any data involved relates to a subset of VinSolutions customers and that Cox intends to support affected dealers with notification obligations.",
      "content_text": "Cox Automotive confirms suspicious activity on VinSolutions dealership CRM after Scarlett Group data theft claim: NIADA, the independent dealers' association, says Cox believes any data involved relates to a subset of VinSolutions customers and that Cox intends to support affected dealers with notification obligations.\n\nSource: https://niada.com/dashboard/vinsolutions-reports-security-incident-affecting-limited-number-of-dealerships/",
      "date_published": "2026-10-27T00:00:00.000Z",
      "external_url": "https://niada.com/dashboard/vinsolutions-reports-security-incident-affecting-limited-number-of-dealerships/",
      "tags": [
        "medium"
      ]
    },
    {
      "id": "https://pwn.watch/i/cox-automotive-vinsolutions-dealer-crm-incident-oct-2026#2026-10-26-39e920c7",
      "url": "https://pwn.watch/i/cox-automotive-vinsolutions-dealer-crm-incident-oct-2026#2026-10-26-39e920c7",
      "title": "Cox Automotive confirms suspicious activity on VinSolutions dealership CRM after Scarlett Group data theft claim: Cox Automotive confirms suspicious activity limited to VinSolutions: quickly contained, no encrypting malware, no service disruption; it believes a limited subset of dealers was affected and will notify affected parties directly.",
      "content_text": "Cox Automotive confirms suspicious activity on VinSolutions dealership CRM after Scarlett Group data theft claim: Cox Automotive confirms suspicious activity limited to VinSolutions: quickly contained, no encrypting malware, no service disruption; it believes a limited subset of dealers was affected and will notify affected parties directly.\n\nSource: https://www.autoremarketing.com/ar/technology/cox-automotive-spots-suspicious-activity-connected-to-vinsolutions-that-was-quickly-contained/",
      "date_published": "2026-10-26T00:00:00.000Z",
      "external_url": "https://www.autoremarketing.com/ar/technology/cox-automotive-spots-suspicious-activity-connected-to-vinsolutions-that-was-quickly-contained/",
      "tags": [
        "medium"
      ]
    },
    {
      "id": "https://pwn.watch/i/cox-automotive-vinsolutions-dealer-crm-incident-oct-2026#2026-10-23-6799f914",
      "url": "https://pwn.watch/i/cox-automotive-vinsolutions-dealer-crm-incident-oct-2026#2026-10-23-6799f914",
      "title": "Cox Automotive confirms suspicious activity on VinSolutions dealership CRM after Scarlett Group data theft claim: A newly active group calling itself Scarlett Group lists VinSolutions on its leak site and claims to hold dealership customer records, including Social Security numbers, driver's license numbers and credit applications (unverified).",
      "content_text": "Cox Automotive confirms suspicious activity on VinSolutions dealership CRM after Scarlett Group data theft claim: A newly active group calling itself Scarlett Group lists VinSolutions on its leak site and claims to hold dealership customer records, including Social Security numbers, driver's license numbers and credit applications (unverified).\n\nSource: https://www.cbtnews.com/hacking-group-claims-data-theft-at-vinsolutions/",
      "date_published": "2026-10-23T00:00:00.000Z",
      "external_url": "https://www.cbtnews.com/hacking-group-claims-data-theft-at-vinsolutions/",
      "tags": [
        "medium"
      ]
    }
  ]
}