Crm
Security incidents tagged Crm. Newest first.
1 Crm incident in the last 12 months
- Incidents
- 1
- Live
- 1
- Patched
- 0
- Days without an incident
- 0
- Longest quiet run: 3 days (Oct 28–Oct 30)
- MediumPartly patched
Cox Automotive confirms suspicious activity on VinSolutions dealership CRM after Scarlett Group data theft claim
Cox Automotive confirmed on Oct 26 2026 that it detected suspicious activity limited to VinSolutions, its CRM platform for car dealerships (used by about 7,000 dealerships, per Auto Remarketing). Cox says the activity was quickly contained, involved no encrypting malware and did not disrupt the service, that it is working with outside cyber experts, and that it believes a limited subset of VinSolutions dealers was affected and will notify them directly. The statement followed a listing by a newly active group calling itself Scarlett Group on its leak site on Oct 23, which claims customer records including Social Security numbers, driver's license numbers and credit applications. Cox has not confirmed those claims, the number of dealers or consumers involved, or what data was taken.
Cox Automotive VinSolutions (dealership CRM)Since Oct 23, 2026