BMW Group
Data Breach on September 18, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | bmw.com | ||
| Threat Actor | Everest | ||
| Date Discovered | Sep 18, 2025 | ||
| Description | BMW Group is a German automotive and luxury vehicles company based in Munich, Germany, designing, manufacturing, and selling premium cars, motorcycles, and mobility services globally under brands like BMW, Mini, and Rolls-Royce. | ||
| Leak Size | Unknown |
Credential Exposure for bmw.com
We've indexed 1,170 @bmw.com accounts from external breaches, plus 980 credentials for bmw.com itself.
Last checked Aug 20, 2026
| @bmw.com addresses from external breaches | |
|---|---|
| Third-party breaches | 1,022 accounts · across 231 breaches · 832 with a plaintext password · most recent Jan 25, 2026 |
| Combo lists | 539 accounts · most recent Aug 18, 2026 |
| Phishing pages | 32 accounts · most recent Aug 12, 2026 |
| Passwords for bmw.com accounts | |
|---|---|
| Combo lists | 867 logins · most recent Aug 18, 2026 |
| Infostealer logs | 304 logins · 187 infected devices · most recent Aug 7, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
BMW Group was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.