Hyundai AutoEver America Data Breach Investigation

Overview
An arm of car manufacturer Hyundai handling the company’s technology services and holding information on millions of Americas, has begun disclosing that cybercriminals acquired sensitive personal information for customers including names, Social Security numbers, and drivers’ licenses. The disclosure comes many months after the breach occurred.

Background
Hyundai AutoEver America (HAEA) is a part of the broader Hyundai and Kia company, and provides business systems to Hyundai such as digital sales, manufacturing, vehicle telematics, maps, vehicle connectivity, and other functions. HAEA’s systems are a part of more than 2.7 million cars in the United States. In filings with government agencies, HAEA reported the disclosure includes customers’ Social Security numbers and drivers’ license numbers.

What Happened?
HAEA reported cybercriminals accessed its computer systems without permission beginning February 22, 2025 and running through March 2, 2025. The company only began notifying customers of the breach in November 2025. It is unclear if the disclosure includes both employees and customers’ information.

Users Face New Harms.

Victims whose personal identifying information is disclosed through data breach incidents face many kinds of threats. Because our personal identifying information like Social Security numbers and drivers’ licenses are so sensitive and important, their disclosure gives criminals potential access to many parts of our lives. With access to these numbers, criminals can solicit loans, access retirement accounts, charge to the victims’ credit cards, and more. Without the identifying information, criminals would have far less access to the victims’ virtual and financial lives. Besides the obvious fraud that can result from this disclosure, victims also face a heightened risk of future fraud as well as the loss of value in that information, lost time spent trying to stop existing fraud, and lost time preventing future injuries. Victims may spend years, even their entire lives, spending extra time and money monitoring their credit and other financial accounts.

Lockridge Grindal Nauen PLLP (“LGN”) purchases advertisements on search engines, social media platforms, and other websites. Providing information to LGN, whether in response to an advertisement or otherwise, does not create an attorney-client relationship between you and LGN.  We will not agree to represent you until we (1) have determined that we do not have any conflicts that would preclude us from representing you; (2) have thoroughly evaluated your matter; and (3) have confirmed we are authorized to engage in the practice of law in the relevant jurisdiction.  Nothing in LGN’s advertising or its websites is intended to suggest that its services are of a greater quality than the services that may be provided by other lawyers nor are past results a promise or suggestion of future results.