Groupe CGA: 65,000 customers and 2,500 employees included in a data leak

On 4 May 2026, Groupe GCA — a French automotive dealership group based in Cholet that operates around 130 sales and bodywork sites across the Pays de la Loire region and Belgium — was named in a data leak claimed by the threat actor DumpsecV2 (also reported as "DumpSec"), who posted a structured database on a cybercrime forum.

According to the company, the intrusion targeted its online maintenance-contract registration platform around 30 April 2026 and was discovered the following week when the data surfaced on the darknet. Internal networks were reportedly not affected, and the dealerships continued normal operations.

The leak is reported to involve roughly 65,000 customers and 2,500 employees. Exposed data categories included:

• Customer names, postal addresses and phone numbers
• Vehicle details such as registration numbers, VINs and mileage
• Maintenance-contract and commercial information
• Employee names, phone numbers and internal organisational details

Groupe GCA stated that banking information, identity-document copies and email addresses were not compromised. The group notified affected customers by email (around 50,000) and post, filed a complaint with cybercrime authorities, and reinforced its security controls. As the breach was scoped to the maintenance platform and contained, no broader system compromise has been confirmed.