Claim: Threat Actor Offers Database of US Vehicle Owners, AAA Members
A threat actor on a dark web forum is offering a database it says contains names, addresses, phone numbers and vehicle details (make, model and VIN) of US car owners and AAA members, with a sample posted. The claim is unverified: AAA has not confirmed any incident and the sample's structure suggests the records may come from a third-party data aggregator rather than AAA's own systems. Members should watch for scams that use this information.
What happened
A threat actor on a dark web forum announced the sale of a database with personal and vehicle details of US car owners and AAA members, and posted a sample. The claim is unverified. AAA has not confirmed any incident.
Why it matters
If genuine, the data includes full names, home addresses, phone numbers, vehicle make, model and VIN, and AAA membership information. This enables targeted phishing, identity theft and vehicle-related fraud against anyone who owns a car or holds an AAA membership in the US.
What to do
Warn customers and employees who own US vehicles or hold AAA memberships about scams that may use this data. Monitor official channels for confirmation or denial from AAA and treat the case as a claim, not a confirmed breach.
For the technical team
- Affected
- Base alegada de proprietários de veículos e membros da AAA nos EUA; estrutura da amostra sugere origem em agregador de d · Alleged database of US vehicle owners and AAA members. No record count given.
- Exploitation
- Threat-actor claim on an underground forum, with a sample posted. Reported by DailyDarkWeb as an unverified claim, with no breach confirmation from AAA. No exploitation reported.
- Fix
- No fix applicable; no confirmed incident.
- Vector
- Alleged data leak. The source does not describe how the data was obtained. The sample's structure suggests the records may come from a third-party data aggregator or a mix of sources rather than AAA's own systems.
- More details
- Alleged fields: full names, home addresses, phone numbers, vehicle make, model and VIN, and AAA membership information. No record count was provided. DailyDarkWeb analyst note: sample suggests a third-party aggregator; the threat-actor claim is not confirmation of a breach.
Timeline
First report: actor offers the database for sale with a sample on an underground forum.
Sources 1 source
- @DailyDarkWeb @DailyDarkWeb
