Karl Auto Group Data Breach Exposes Sensitive Customer Information
Karl Auto Group, a regional automotive dealer group based in Ankeny, Iowa, confirmed a data breach after an unauthorized third party accessed its computer systems. The company, which operates multiple dealerships selling brands like Chevrolet, GMC, and Jeep, first detected the incident on April 4, 2026, though the breach occurred prior to March 27, 2026. The attack disrupted phone and computer systems across its dealerships, leading to operational disruptions.
A third-party forensic cybersecurity firm is investigating the incident, which has exposed sensitive customer data, including:
- Full names
- Social Security numbers
- Driver’s license and government-issued ID numbers
- Financial account information
- Passport numbers and images
The law firm Shamis & Gentile P.A. is reviewing potential legal claims for affected individuals, who may be eligible for compensation. The investigation remains ongoing.
Source: https://www.claimdepot.com/investigations/karl-auto-group-data-breach-2026
Karl Tyler Auto Group Inc. cybersecurity rating report: https://www.rankiteo.com/company/karl-tyler-auto-group-inc-
"id": "KAR1781036753",
"linkid": "karl-tyler-auto-group-inc-",
"type": "Breach",
"date": "3/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Automotive',
'location': 'Ankeny, Iowa, USA',
'name': 'Karl Auto Group',
'type': 'Automotive Dealer Group'}],
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Full names',
'Social Security numbers',
'Driver’s license and '
'government-issued ID numbers',
'Financial account information',
'Passport numbers and images']},
'date_detected': '2026-04-04',
'description': 'Karl Auto Group, a regional automotive dealer group based in '
'Ankeny, Iowa, confirmed a data breach after an unauthorized '
'third party accessed its computer systems. The attack '
'disrupted phone and computer systems across its dealerships, '
'leading to operational disruptions. Sensitive customer data, '
'including full names, Social Security numbers, driver’s '
'license and government-issued ID numbers, financial account '
'information, and passport numbers and images, were exposed.',
'impact': {'data_compromised': 'Sensitive customer information including full '
'names, Social Security numbers, driver’s '
'license and government-issued ID numbers, '
'financial account information, and passport '
'numbers and images',
'identity_theft_risk': 'High',
'operational_impact': 'Operational disruptions across dealerships',
'payment_information_risk': 'High',
'systems_affected': 'Phone and computer systems across '
'dealerships'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Cyber Incident Description'}],
'regulatory_compliance': {'legal_actions': 'Potential legal claims reviewed '
'by Shamis & Gentile P.A.'},
'response': {'third_party_assistance': 'Third-party forensic cybersecurity '
'firm'},
'title': 'Karl Auto Group Data Breach Exposes Sensitive Customer Information',
'type': 'Data Breach'}