BMW Group
Data Breach on September 18, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | bmw.com | ||
| Claimed By | Everest | ||
| Date Discovered | Sep 18, 2025 | ||
| Description | BMW Group is a German automotive and luxury vehicles company based in Munich, Germany, designing, manufacturing, and selling premium cars, motorcycles, and mobility services globally under brands like BMW, Mini, and Rolls-Royce. | ||
| Leak Size | Unknown |
Credential Exposure for bmw.com
We've indexed 1,180 @bmw.com accounts from external breaches, plus 1,072 credentials for bmw.com itself.
Last checked Oct 4, 2026
| @bmw.com addresses from external breaches | |
|---|---|
| Third-party breaches | 1,022 accounts · across 231 breaches · 832 with a plaintext password · most recent Jan 25, 2026 |
| Combo lists | 550 accounts · most recent Oct 2, 2026 |
| Phishing pages | 32 accounts · most recent Aug 12, 2026 |
| Passwords for bmw.com accounts | |
|---|---|
| Combo lists | 957 logins · most recent Oct 4, 2026 |
| Infostealer logs | 334 logins · 200 infected devices · most recent Sep 30, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
BMW Group was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.