Auto-ici Data Breach
The 2025 Auto-ici data breach occurred when unauthorized threat actors exfiltrated the customer relationship database of Auto-ici (auto-ici.fr), a prominent French multi-brand automotive broker and dealership.
Exposed Data Types
5- Email addresses
- Names
- Phone numbers
- Physical addresses
- Genders
About This Breach
The breach resulted in the public exposure of extensive customer profiles, contact numbers, residential locations, and order credentials.
What information was affected in the Auto-ici incident?
The compromised JSON dataset (auto-icigift.json) encompasses comprehensive dealership customer profiles across France. The incident impacted 186,092 unique client profiles, exposing the following personal data categories:
- Personal Identity: Title/gender (Mr/Mme), first name, last name, and maiden name.
- Contact Credentials: Canonical email addresses, primary and secondary mobile/landline telephone numbers.
- Physical Locations: Postal zip codes, residential street addresses, and cities across France.
- Account Demographics: Internal dealership client identification numbers (account_id) and account classification flags.
How many accounts were affected?
Systematic canonical extraction and deduplication verified 186,092 unique canonical email addresses across 202,863 raw customer profile entities.
Technical analysis and security risks
The dataset represents an exfiltrated JSON export from the dealership's core enterprise CRM and customer registration backend. The public availability of home addresses and phone numbers coupled with verified automotive purchase history poses severe risks of targeted vehicle insurance scams, fake registration tax notices, and high-conviction voice phishing (vishing) campaigns.
Recommended actions for affected users
Clients who have enquired, reserved, or purchased vehicles via Auto-ici should:
- Exercise intense caution regarding unexpected calls, SMS messages, or emails regarding vehicle delivery fees, insurance policy renewals, or registration documentation.
- Never transfer funds or provide banking credentials based on unsolicited electronic notifications; always independently verify through official dealership channels.
- Ensure multi-factor authentication (MFA) is active across all personal email accounts.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
