About Hyundai AutoEver America, LLC
Hyundai AutoEver America, LLC, located in Fountain Valley, CA, is a technology services provider supporting Hyundai’s automotive operations in the United States. On March 1, 2025, the company discovered a data breach impacting its information technology environment. The breach involved unauthorized access to certain personal information, including names and Social Security numbers, due to an external system hacking incident. The breach affected one individual, who was notified on October 30, 2025.
What Happened
On March 1, 2025, HAEA became aware of a cyber incident that impacted our information technology environment. Upon discovery, we immediately launched an investigation with the support of external cybersecurity experts to assess the scope of the incident, confirm containment, and identify any affected information. HAEA also worked with law enforcement. Through our investigation, we determined that the unauthorized activity appears to have begun on February 22, 2025, and the last observed unauthorized activity occurred on March 2, 2025.
The breach, which occurred on February 22, 2025, involved unauthorized access to personal information, affecting one individual. The security incident was discovered on March 1, 2025.
Next Steps
Affected users should remain vigilant for any signs of identity theft or fraud. It is advised to regularly review account statements and monitor free credit reports for any suspicious activity. If any unusual activity is detected, it should be reported immediately to financial institutions. Additionally, impacted individuals can contact the Federal Trade Commission or their state Attorney General for more information on protecting themselves from identity theft.
Identity Theft Protection Services
Hyundai AutoEver America, LLC has arranged for impacted individuals to receive 24 months of complimentary identity protection services through Epiq Privacy Solutions. These services include three-bureau credit monitoring and identity protection services. Affected individuals have 90 days from the notification date to activate this service using a unique enrollment code. The service aims to help protect against potential misuse of personal information.