RevolutionParts, an e-commerce platform that thousands of car dealerships use to sell parts and accessories online, has confirmed a data breach exposing more than 5 million customer records.
If you've bought parts through a dealership's website in the past few years, there's a reasonable chance your order went through RevolutionParts' backend without you ever seeing the brand name. That's the nature of white-label e-commerce infrastructure: it's invisible right up until it's breached.
The exposed data centres on order and contact details rather than payment card numbers, which is typically handled by a separate processor. Even so, names, email addresses and order history are more than enough to fuel convincing phishing attempts, especially ones that reference a real vehicle or part you actually bought.
Be sceptical of any 'your order' or 'parts recall' email that arrives referencing a purchase you made through a dealership site, even if the details look accurate. Verify by contacting the dealership directly through a number you look up yourself, not one in the email.