A security hole in one small vendor’s dealership platform has put customer purchase records from across Germany in criminal hands. Police in the Wurzburg area confirmed a cyberattack on an IT service provider, saying the intrusion came through third-party software that carried a serious vulnerability at the time.
What the attackers walked away with
The software vendor told German media the stolen records include order and invoice numbers, delivery dates, purchase prices and financing amounts. That combination is unusually dangerous. A fraudster who quotes the right order number and the right agreed price on a payment request can sound entirely credible to a buyer waiting on a car.
The platform, GeNesys, is operated by Achter Autohaus Software, a small firm based in Rodelsee-Frohstockheim near Kitzingen. Its own reference page claims more than 400 dealerships nationwide. Access reached the environments of multiple dealer tenants rather than a single store.
Volkswagen brands at the centre
Affected retailers are mainly, though not exclusively, sellers of Volkswagen Group brands. Volkswagen confirmed the software is used at Volkswagen Group Retail Deutschland and that customers have been notified. That unit covers roughly 120 dealership locations, though the company has not said how many were actually compromised.
Police say the exact scope of the data and the number of affected customers is still unclear, and that no confirmed fraud cases have surfaced yet. They also warned it is too early to give an all-clear.
The case is a familiar shape for the sector. Dealerships outsource scheduling, invoicing and customer records to shared platforms precisely because they cannot staff security teams of their own. One supplier-side flaw then reaches every store on the tenant list at once.
