2026 Mercedes-Benz UK — 130K customer/vehicle records on cybercrime forum (unverified; Mercedes cites prior dealership incident)
Data compromised
Actor-claimed 130,000 records: customer names, UK addresses/postcodes, mobile numbers, emails, vehicle numbers/models, registration numbers/dates, MOT due dates, last service dates, order/quote status—Cybernews verified sample UK fields; Mercedes UK says dataset is altered and not from a current Mercedes-Benz breach
Technical writeup
Unverified underground listing — May 2026. Cybernews reported May 25–27, 2026 that a threat actor listed roughly 130,000 Mercedes-Benz customer and vehicle records for sale on a cybercrime forum, claiming Excel/CSV fields including names, UK addresses and postcodes, mobile numbers, emails, vehicle identifiers, registration data, MOT due dates, and service history. Cybernews researchers verified sample records with UK phone numbers, postcodes, car models, and registration formats consistent with UK dealership data. Mercedes-Benz UK told Cybernews the listing is linked to a previously known external UK dealership incident that was thoroughly investigated, that the advertised dataset has been altered, and that there is no indication of any current breach of Mercedes-Benz systems or new customer risk. BreachHistory indexes the forum count as unverified actor/reporter-cited volume pending independent regulatory confirmation.
Root cause
Underground marketplace listing of alleged UK customer and vehicle dataset; Mercedes UK attributes data to previously investigated external dealership incident