Unverified claim. On July 22, 2026, Dark Web Informer reported that forum actor kitta published what they called the full customer database of RevolutionParts, the dealership auto-parts e-commerce platform—about 5,147,231 unique customers.
RevolutionParts had not confirmed the listing at indexing time. Treat the count and fields as an actor claim until the company or a regulator says otherwise.
What the listing allegedly includes
Names, emails (plaintext and MD5), phones, street addresses, and persistent device/browser identifiers including MAC addresses and iOS advertising IDs. Passwords and payment data were not in the advertised field list.
Why it still matters if true
Auto-parts buyers are easy phishing targets: a caller who knows your address and that you ordered brake pads for a specific vehicle sounds legitimate. Device IDs add long-lived tracking hooks across other leaks.
Action items
- If you shopped dealer parts portals powered by RevolutionParts, watch for parts-order and “refund” phishing.
- Do not reuse the same password from any dealer portal elsewhere.
- Wait for a company or AG notice before assuming your record is confirmed exposed.
Canonical record
RevolutionParts unverified dump claim. Source: Dark Web Informer.