DisclosureLens
HackingRetail & ConsumerRetailData MishandlingSupply Chain (3P Vendor)Customer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountMediumContained

VOLKSWAGEN GROUP OF AMERICA, INC.

bd_ace1b386f57a5432 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 24, 2021

Filed

Jun 11, 2021

To disclose

18 days

Affected

Not disclosed

Linked

11 filings

Confidence

65%
Full breach record for VOLKSWAGEN GROUP OF AMERICA, INC. →3 incidents on file

Volkswagen Group of America, Inc. disclosed a data breach involving customer and buyer information obtained from a third-party vendor. The incident involved unsecured electronic data left by a vendor between August 2019 and May 2021. Affected data included names, addresses, emails, phone numbers, VINs, and sensitive identifiers like driver's license numbers, SSNs, and loan numbers. VW notified authorities, engaged cybersecurity experts, and partnered with IDX to offer 24 months of credit monitoring and identity theft recovery services to affected individuals.

Incident timeline

undetected · 662 days
discovery → filing · 18 days

Aug 1, 2019

Begins

May 24, 2021

Discovered

Jun 11, 2021

Filed

vs. sector median

7 wks faster

This filing is one of 11 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 3d gap

Filing propagation · 11 filings · 11 states

View merged incident ↗
Maine State AGJun 10 · first
California State AGJun 10 · first
Massachusetts State AGJun 10 · first
Oregon State AGJun 10 · first
Hawaii State AGJun 10 · first
Idaho State AGJun 10 · first
Delaware State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.