2025 API vulnerability — 5.8M dealership customers
Data compromised
Full names, addresses, dates of birth, Social Security numbers, employment information
Technical writeup
Threat actor breached an integration partner in July 2025, then exploited an API vulnerability (failure to validate consumer reference IDs) in 700Dealer.com to access customer data. Approximately 20% of consumer data stolen before API was terminated. Texas most heavily affected. 700Credit offers credit reports for automotive dealerships.
Root cause
Third-party partner breach; API validation vulnerability exploited.