Hyundai AutoEver America LLC, the automotive IT software solutions part of Hyundai Motor Group, confirmed a serious breach of sensitive personal business data. This was outlined in official breach notification letters sent to affected individuals, as well as other public communications, in which the company admits to having unauthorized access to its internal systems earlier in the year. Hyundai AutoEver mentioned the intrusion incident, starting with threat actors breaking into the company’s IT environment on February 22, 2025.
These attacks went undetected for roughly 9 days
The attacks were discovered on March 1, 2025. The company also stated that the last unauthorized activity was recorded on March 2, indicating that it was successful with containment efforts from that window. Upon discovery, Hyundai AutoEver conducted a detailed internal check, hiring outside cybersecurity experts, and informing the appropriate authorities.
A variety of sensitive personal data was exposed, including full names, social security numbers, and driver’s license information.
Hyundai AutoEver stated that affected individuals were sent specific, personalized notices detailing the specific data elements that were compromised. Although the company has not stated the number of customers that were affected, the data exposed is concerning, considering the risk of identity theft and fraud that is associated with the exposed information
The impact on operations was reportedly minor
Hyundai AutoEver stated that there were other systems and corporate data that were affected, but the impact on operations was minor. The company’s forensic analysts worked to ensure that all affected databases were found and unauthorized access was completely wiped out.
Investigators also stated that there was no payment card information involved, no telematics data concerning Hyundai vehicles, and that the breach impact was limited to personal identifiers and internal corporate data.
Hyundai AutoEver also stated that, as a reaction to this incident, they had reinforced security throughout their entire IT infrastructure. These included maintained systems for active surveillance, reinforced perimeter defenses, and the implementation of multi-factor access authentication systems.
Hyundai customers receive 2 years of free credit monitoring and identity protection services
Hyundai AutoEver also contracted with Epiq Privacy Solutions to give customers two years of free credit monitoring and identity protection services.
Clients can activate identity theft services and charge monitoring for all three credit bureaus within 90 days of receiving a unique code in their notification letters. These services also include assistance in resolving any identity theft issues.
IT and connected vehicle service providers are the most vulnerable to car cyber attacks
Recent events reveal high levels of confidence in cyber attacks in the automotive industry. Automakers depend on easily accessible digital ecosystems for telematics, infotainment systems, and particularly vulnerable customer data systems.
Sophisticated soft targets include dealership software providers and telematics. These systems are ubiquitous, and defensive security systems in the industry are unavailable.
The most damaging cyber attacks involve social security numbers and driver’s info because they lead to identity theft. Attacking vehicles to steal personal data is less complex than adhering to vehicle cyber blocking. Hyundai AutoEver recommends monitoring credit, adding credit alerts, and using the identity theft services to reclaim any stolen identity. Hyundai AutoEver is being open and forthcoming while working with the appropriate regulators and law enforcement.
The company has not yet confirmed if the breach was due to ransomware or an advanced persistent threat (APT) group. However, this breach is part of a trend of more targeted hits against the automotive IT providers. As the automotive industry continues to digitally transform, ransomware, APT, or not, will take priority in the automotive industry and its IT providers’ digital resilience. For now, Hyundai AutoEver clients are advised to take the offer on credit monitoring and watch for any unusual transactions.
