Communauto reveals employee-initiated data breach affecting thousands of members

Communauto announced that an internal employee deployed an unauthorized automated script during the night of Sept. 3-4, pulling personal records of about two percent of its customers nationwide. The data included names, mailing addresses, driver’s licence numbers and any uploaded photographs. Law enforcement executed a search warrant at the employee’s residence the next day, confiscating the relevant computer hardware.

The company emphasized that account passwords and payment information remained secure. To detect any potential exposure, Communauto engaged a consulting firm to scan the open and dark web. Affected members were urged to stay alert for suspicious communications and to enable multi-factor authentication.