Hackers Drive Off With Data of 2.9 Million Hyundai, Kia, and Genesis Customers
By: Jim Stickley and Tina Davis
January 11, 2026
If you own a Hyundai, Kia, or Genesis vehicle, your personal information may have been driven off with cybercriminals earlier this year. Hyundai AutoEver America (HAEA), the automaker’s IT services subsidiary, has confirmed a massive data breach potentially affecting up to 2.7 million customers. The exposed data includes Social Security numbers and driver’s license information, information that puts victims at high risk for identity theft.
Cyberattackers began cruising around in the systems on February 22, 2025, and maintained unauthorized access to HAEA’s systems until March 2, when the company discovered the intrusion. The attackers were promptly expelled, but not before driving off with the data. Despite becoming aware of the incident in March, Hyundai didn’t begin notifying affected customers until late October. They did hire forensics analysts to do a thorough investigation, which is suspected to be the reason for the delay.
Social Security numbers are not as easily changed as passwords or credit card information, giving threat actors a greater opportunity to establish fraud schemes with the stolen data. If you are in this group of victims, it’s time to take the wheel.

Hyundai is offering two years of free credit monitoring and identity protection services through Epiq Privacy Solutions. Affected individuals have 90 days from their notification letter date to activate this service using the unique enrollment code provided. If you receive a letter indicating you are eligible for this service, take advantage of it. If you have another one that’s already active, wait until the last moment to sign up so you have continuing service for as long as possible. Keep in mind, this won’t prevent someone from opening accounts. It will alert you that someone is trying. It’s up to you to hit the brakes.
- Monitor your financial accounts for any unusual activity and report anomalies immediately.
- Enable multi-factor authentication on all accounts.
- Consider placing a security freeze on your credit report with the three major credit bureaus—Equifax, Experian, and TransUnion.
- Review your credit reports regularly for suspicious activity. You can get one from each of the bureaus at no charge each year from the annualcreditreport.com website.