Peruzzi Buick GMC Discloses 2025 Ransomware Attack Exposing Sensitive Customer Data
Peruzzi Buick GMC Inc., a Buick and GMC dealership in Fairless Hills, Pennsylvania, reported a ransomware attack that began in early 2025. The breach was first detected on February 27, 2025, when unauthorized access to the dealership’s network was identified. The attack was attributed to the Qilin ransomware group, which claimed responsibility on March 4, 2025, via a post on the Tor network.
Qilin asserted it had exfiltrated 60 GB of data, providing sample screenshots as proof, and threatened to release the full dataset on March 11, 2025. An investigation concluded on June 22, 2026 over 15 months after the initial intrusion that the compromised files contained personally identifiable information (PII) and protected health information (PHI), including full names, Social Security numbers, driver’s licenses, and health records.
Peruzzi Buick disclosed the breach to the attorneys general offices of Massachusetts and Vermont. In response, the dealership offered affected individuals a complimentary membership to Experian IdentityWorks and directed them to Federal Trade Commission (FTC) identity theft prevention resources. Notification letters with activation instructions were mailed to impacted parties.
Source: https://www.claimdepot.com/data-breach/peruzzi-auto-group-2026
Peruzzi Auto Group cybersecurity rating report: https://www.rankiteo.com/company/peruzzi-auto-group
"id": "PER1782843975",
"linkid": "peruzzi-auto-group",
"type": "Ransomware",
"date": "2/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Automotive',
'location': 'Fairless Hills, Pennsylvania, USA',
'name': 'Peruzzi Buick GMC Inc.',
'type': 'Dealership'}],
'customer_advisories': 'Complimentary membership to Experian IdentityWorks; '
'FTC identity theft prevention resources',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': ['Full names',
'Social Security '
'numbers',
'Driver’s licenses',
'Health records'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Protected Health Information '
'(PHI)']},
'date_detected': '2025-02-27',
'date_publicly_disclosed': '2025-03-04',
'date_resolved': '2026-06-22',
'description': 'Peruzzi Buick GMC Inc. reported a ransomware attack that '
'began in early 2025, attributed to the Qilin ransomware '
'group. The breach exposed personally identifiable information '
'(PII) and protected health information (PHI), including full '
'names, Social Security numbers, driver’s licenses, and health '
'records.',
'impact': {'data_compromised': '60 GB of data', 'identity_theft_risk': 'High'},
'investigation_status': 'Concluded',
'ransomware': {'data_exfiltration': 'Yes', 'ransomware_strain': 'Qilin'},
'references': [{'date_accessed': '2025-03-04',
'source': 'Tor network post by Qilin ransomware group'}],
'regulatory_compliance': {'regulatory_notifications': ['Massachusetts '
'Attorney General',
'Vermont Attorney '
'General']},
'response': {'communication_strategy': 'Notification letters mailed to '
'impacted parties; disclosure to '
'attorneys general offices of '
'Massachusetts and Vermont'},
'threat_actor': 'Qilin ransomware group',
'title': 'Peruzzi Buick GMC Ransomware Attack Exposing Sensitive Customer '
'Data',
'type': 'Ransomware'}