Hacking group claims data theft at VinSolutions, Cox investigating ‘suspicious activity’

Cox Automotive told Auto Remarketing that it "recently detected suspicious activity that was limited to VinSolutions and did not affect other Cox Automotive solutions or platforms."[2] Auto Remarketing reports that the platform is used by about 7,000 dealerships[2].In the same statement, Cox said "the activity was quickly contained, did not involve any encrypting malware,"[2] and that customers could keep using VinSolutions without disruption.According to CBT News, Cox said it believes the incident affected a limited subset of VinSolutions dealers and is working with outside cyber experts to determine what data was involved[1].CBT News reports that Ransomware.live recorded Scarlett Group's listing of VinSolutions on its leak site Friday, describing the group as newly active[1].CBT News also reports that dark web monitoring service Darkwiser said the group claims to have customer records, including Social Security numbers, driver's license numbers and credit applications[1].Car Dealership Guy reports that HudsonRock, a company that tracks leaked credentials, said the attack allegedly compromised the data of 214 VinSolutions users[3]. The page says the investigation is sponsored by the law firm Bryson Harris Suciu & DeMay PLLC[1].