Conn. Dealership Sued Over 12,000-Record Data Breach

A lawsuit that may qualify as a class action has been leveled by one customer of Branhaven Chrysler Dodge Jeep Ram of Branford, Conn., who claims security failures led to the theft of his personal data, along with nearly 12,000 other customers.
Automotive News’s Eric Freedman reports the plaintiff argues “necessary data security steps” would have prevented a September 2024 cyberattack that exposed his birth date and Social Security and driver’s license numbers, among other personally identifiable information.
“Data thieves regularly target car dealerships like [Branhaven CDJR] due to the highly sensitive information that such entities maintain,” the complaint reads, in part. “Defendant knew and understood that unprotected private information is valuable and highly sought after by criminal parties who seek to illegally monetize that private information through unauthorized access.”