Hyundai AutoEver America LLC (HAEA)

Hyundai AutoEver America LLC (HAEA), an IT and software solutions provider for Hyundai Motor Group (including Kia and Genesis in North America), suffered a data breach exposing the sensitive personal information of approximately **2.7 million individuals**. The compromised data included **Social Security numbers and driver’s license numbers**, which are highly sensitive identifiers. The breach was detected after unauthorized access to HAEA’s network, though the exact method (e.g., phishing, vulnerability exploitation) remains undisclosed. HAEA’s services—such as **vehicle telematics, over-the-air updates, and autonomous driving systems**—rely heavily on secure data handling, making this incident particularly critical. The exposure of such personal data poses severe risks, including **identity theft, financial fraud, and long-term reputational damage** to both HAEA and its parent company, Hyundai Motor Group. The breach has already led to a **federal lawsuit**, underscoring its legal and operational consequences.

Source: https://news.bloomberglaw.com/business-and-practice/hyundai-america-unit-sued-over-data-breach-affecting-2-7-million

Hyundai AutoEver America cybersecurity rating report: https://www.rankiteo.com/company/hyundai-autoever-america

"id": "HYU1302713111425",
"linkid": "hyundai-autoever-america",
"type": "Breach",
"date": "11/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '2.7 million individuals',
                        'industry': 'Automotive IT and Software Solutions',
                        'location': 'North America (primarily USA)',
                        'name': 'Hyundai AutoEver America LLC (HAEA)',
                        'type': 'Subsidiary'}],
 'data_breach': {'data_exfiltration': 'Likely (based on lawsuit allegations)',
                 'number_of_records_exposed': '2.7 million',
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security numbers',
                                              'driver’s license numbers',
                                              'sensitive personal '
                                              'information']},
 'date_detected': 'early [year not specified]',
 'description': 'Hyundai AutoEver America LLC (HAEA) was sued in federal court '
                'over an alleged data breach that exposed sensitive personal '
                'information, including Social Security numbers and driver’s '
                'license numbers, of approximately 2.7 million people. HAEA is '
                'responsible for IT and software solutions for the Hyundai '
                'Motor Group, including Kia and Genesis cars in North America. '
                'Services impacted include vehicle telematics, over-the-air '
                'software updates, and autonomous driving systems.',
 'impact': {'brand_reputation_impact': 'Potential negative impact due to '
                                       'lawsuit and exposure of sensitive data',
            'data_compromised': ['Social Security numbers',
                                 'driver’s license numbers',
                                 'sensitive personal information'],
            'identity_theft_risk': 'High (due to exposure of SSNs and driver’s '
                                   'license numbers)',
            'legal_liabilities': 'Federal lawsuit filed in US District Court '
                                 'for the Central District of California',
            'systems_affected': ['vehicle telematics',
                                 'over-the-air software updates',
                                 'autonomous driving systems']},
 'investigation_status': 'Ongoing (lawsuit in progress)',
 'references': [{'source': 'US District Court for the Central District of '
                           'California (complaint filing)'}],
 'regulatory_compliance': {'legal_actions': 'Federal lawsuit filed'},
 'title': 'Hyundai AutoEver America LLC Data Breach',
 'type': 'Data Breach'}