Porsche · Breach

Actor claims leak of 280K Porsche Iceland records

Oct 29, 2026 · 1 min read

A threat actor posted on a cybercrime forum a sample of a database they claim holds about 280,000 customer and sales-lead records from Porsche dealership operations in Iceland. The claim is unverified and Porsche has issued no public statement. The sample allegedly includes names, emails, phone numbers and kennitala, calling for vigilance against phishing and identity fraud.

By HIFY Radar newsroom Updated 10/29/2026 09:36 AM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

A threat actor posted on a cybercrime forum a sample of a database they say holds about 280,000 customer and sales-lead records from Porsche dealership operations in Iceland. The sample allegedly includes full names, personal and work emails, phone numbers, job titles, LinkedIn profiles and Icelandic national ID numbers (kennitala). The claim is unverified and the victim has issued no public statement.

Why it matters

If the data is real, customers face targeted phishing and identity fraud, since kennitala combined with job titles and vehicle interest enables personalized scams. The disclosure may create privacy obligations and damage trust in the dealership operation.

What to do

Watch official channels for a Porsche Iceland statement, warn customers to distrust contacts citing their kennitala or vehicle interest, and strengthen identity verification in commercial processes.

For the technical team

Affected: Porsche (operações de concessionárias na Islândia) Base alegada de cerca de 280 mil registros de clientes e leads de vendas de concessionárias Porsche na Islândia · Porsche dealerships in Iceland; alleged database of about 280,000 customer and sales-lead records.
Exploitation: No exploitation reported. Unverified claim posted by a threat actor on a cybercrime forum, reported by DailyDarkWeb. No victim confirmation and no public statement.
Fix: Not applicable; no vulnerability or patch indicated in the sources.
More details: According to DailyDarkWeb, the sample would include internal CRM notes on vehicle interest (Cayenne, Taycan, Macan) and lead status tags. DailyDarkWeb assesses the data appears to come from a dealer CRM or lead-management system, not from Porsche AG.