On October 26, 2026, Cox Automotive confirmed that it found and contained “suspicious activity” on VinSolutions, the customer relationship management (CRM) system that about 7,000 dealerships use to track leads, deals and customers. Cox said the activity “did not involve any encrypting malware,” did not stop dealers from using the system, and touched no other Cox product. It said a limited subset of VinSolutions dealers was affected, that outside cyber experts are working out what data was involved, and that it will notify affected parties directly.
Cox has not said how many dealers or customers are affected or what kind of information was taken.