AUTOSUR data breach: 487K accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2025-12-18
In March 2025, the French vehicle inspection company AUTOSUR suffered a data breach exposing over 10M customer records, though only 487k unique email addresses were present. The compromised data included names, phone numbers, physical addresses, and vehicle details such as make and model, VIN, and registration plate. AUTOSUR later issued a disclosure notice with further details. Exposed data: email addresses, names, phone numbers, physical addresses, vehicle details, vehicle identification numbers (vins), vehicle registration plates. The breach dates from Mar 16, 2025; Have I Been Pwned loaded it on Dec 18, 2025.
What to do
- If you had a AUTOSUR account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
