2026 Groupe GCA - alleged DumpSec leak exposing customers, employees, contracts, and VINs
Data compromised
Customer names, emails, phone numbers, city/postal codes, dealership/customer IDs, vehicle make/model/mileage, VINs, registration/contract details, contract dates, amounts, employee professional emails, names, dealership affiliations, internal groups, and phone numbers
Technical writeup
FrenchBreaches reported on May 4, 2026 that DumpSec claimed a breach of Groupe GCA and published evidence for a structured database allegedly from the French automotive distributor. The report described approximately 65,000 customers and 2,500 employees affected, with samples and a proof portal cited by the source. The data was characterized as likely sourced from CRM or ERP systems and includes dealership, contract, and vehicle-identification details useful for profiling and fraud. The company had not been cited in the source as confirming the breach, so the record remains allegation-based pending official confirmation.
Root cause
Alleged external breach and underground-forum publication by DumpSec; exact technical vector not confirmed