If you've ever bought auto parts online through a dealership site powered by RevolutionParts, your name, email, phone number, and home address are likely in the 5.1-million-record dump a hacker posted for free in July 2026. The exposed data is prime fuel for phishing, SIM-swap attacks, and stalking. Enable two-factor authentication on every account tied to that email, freeze your phone carrier port-out, and remove your address from data broker sites so criminals can't cross-reference the leak.
What Happened in the RevolutionParts Breach?
RevolutionParts is the e-commerce platform behind thousands of automotive dealership online stores — if you've bought OEM parts or accessories from a franchised dealership website, chances are RevolutionParts ran the checkout. In July 2026, a dark-web actor going by kitta posted a listing offering 5,147,231 unique customer records allegedly extracted from RevolutionParts systems. The data was released for free, requiring only a forum reply to unlock — which means it is now circulating widely.
What Data Was Exposed?
Sample records reviewed by researchers include:
- Full names
- Email addresses
- Phone numbers
- Physical addresses
- IP address logs
- Device identifiers and user-agent strings
- Platform-specific metadata
Payment card numbers do not appear in the samples — a small mercy. But everything needed for high-quality phishing and account takeover is there.
Why "just email and address" is still dangerous
Name + email + phone + home address is the exact combination social engineers use to bypass call-center identity checks, SIM-swap your phone number, and impersonate you with your bank. Combined with data already sold by data brokers, this leak lets attackers build a full profile with almost no effort.
Are You Affected?
RevolutionParts powers checkout on dealership sites for major brands including Ford, Toyota, Honda, Subaru, Volkswagen, Nissan, GM, and Mopar. If you have ever ordered a part or accessory from a manufacturer or dealership website — even years ago — assume your record is in the dump until proven otherwise. There is no single lookup tool yet, so treat any account tied to your primary email as potentially exposed.
Is your data already out there?
Leaked data ends up on broker sites and in scammers' hands. Run a free 60-second scan to see your exposure — then let us remove it.
Run a free scan★★★★★ 4.8/5 · Trusted by thousands of families
Immediate Steps to Take
1. Turn on two-factor authentication everywhere that email is used
Attackers with your email and phone will try credential-stuffing against every major service (Amazon, PayPal, Google, banks). Prefer an authenticator app (Google Authenticator, Authy, 1Password) or a hardware key over SMS — SMS 2FA is vulnerable to the SIM-swap attacks this leak enables.
2. Lock down your phone carrier against SIM swaps
Log into your mobile carrier and enable port-out protection, SIM PIN, and any "NumberLock" feature. This is the single most important control after a leak like this, because a successful SIM swap gives attackers your SMS 2FA codes and often full access to bank apps.
3. Rotate the exposed email address's password
Change the password on the inbox itself first (Gmail, Outlook, iCloud), then on any account that uses that email for login or recovery. Use a password manager and unique passwords per site — the whole point of credential-stuffing attacks is that reused passwords open doors.
4. Watch for hyper-personalized phishing
Expect emails and texts referencing your real dealership, real recent purchase, and correct address. "Your Ford order #38291 needs address verification — click here." Never click links in messages you didn't ask for; go to the dealer's official site directly.
5. Consider a virtual phone number
For future online purchases, use a masked phone number (Google Voice, MySudo, Firefox Relay Phone Masks) so your real number never enters another database. Do the same with a masking email for retailer signups.
Cut the Trail: Remove Your Data From Broker Sites
The RevolutionParts leak alone is dangerous. It becomes far more dangerous when attackers pair it with data broker records — spouse names, relatives, employer, past addresses, court records — which they can buy for pennies on Spokeo, BeenVerified, Whitepages, and 100+ similar sites.
Removing your data from those brokers is what breaks the chain. When an attacker looks you up after the RevolutionParts leak and finds nothing on the public web, most give up and move to easier targets.
PrivacyOn shrinks your footprint fast
PrivacyOn removes your personal information from 100+ major data broker sites, adds 24/7 dark web monitoring, and covers up to 5 family members from $8.33/month. Start with a free scan to see exactly which brokers are exposing your address and phone — the same data attackers will try to cross-reference against the RevolutionParts dump.
Longer-Term Protection
- Set a fraud alert or credit freeze at Equifax, Experian, and TransUnion — free and reversible
- Enable dark web monitoring for your email addresses so you're notified when they show up in new leaks
- Use email aliases going forward (iCloud Hide My Email, Firefox Relay, DuckDuckGo Email Protection) so a future leak affects one alias, not your primary inbox
- Assume smishing will spike — text scams that look legit because they reference a recent, real purchase
- Report the breach to the FTC at IdentityTheft.gov if you experience any resulting fraud
Frequently Asked Questions
Is the RevolutionParts breach confirmed?
As of July 2026, a dark-web actor named "kitta" posted 5.1 million records claiming they came from RevolutionParts, and independent researchers reviewed sample records that match the platform's known data structure. RevolutionParts has not published an official confirmation letter at the time of writing — treat the leak as real given the sample verification.
Which dealership sites use RevolutionParts?
RevolutionParts powers e-commerce for thousands of franchised dealerships across major automakers including Ford, Toyota, Honda, GM, Subaru, Nissan, Volkswagen, and Mopar. If you've bought a part from a "parts.[dealer].com" style URL, there's a strong chance RevolutionParts ran the checkout.
Was my payment card information stolen?
Sample records reviewed so far do not include payment card details — just contact information, IP logs, and device metadata. That's a partial relief, but the exposed info is still enough to power convincing phishing and account takeover attempts.
Should I close my dealership account?
Closing the account won't undo the leak — your record is already out. What matters is rotating any passwords tied to that email, enabling 2FA on downstream accounts (bank, Amazon, PayPal, Google), and locking your phone number against SIM swaps.
Is there a better identity protection service after a breach like this?
Yes — PrivacyOn is our top pick. It removes your personal information from 100+ data broker sites (so attackers can't cross-reference the RevolutionParts leak with your current address), adds 24/7 dark web monitoring, and covers up to 5 family members from $8.33/month. Free-monitoring offers from breach-response programs usually only alert you after fraud has already happened; PrivacyOn shrinks the exposed surface first.
How long will the RevolutionParts data circulate?
Once posted for free, dark-web dumps are effectively permanent — they get mirrored, indexed, and folded into combined credential dumps within days. That's why long-term measures (2FA, unique passwords, ongoing broker removal, dark web monitoring) matter far more than any one-time cleanup.