Mercedes-Benz UK Customer Data Allegedly Leaked

A dataset containing records for approximately 130,000 Mercedes-Benz UK customers appeared on an underground marketplace, exposing names, addresses, phone numbers, email addresses, vehicle registration details, and vehicle models.

Public reporting indicates the information was listed for sale on May 25, 2026. Cybernews obtained and verified sample records, confirming the presence of personal contact details alongside vehicle-specific data such as registration numbers and models. At the time of reporting, Mercedes-Benz had not issued a public statement confirming or denying the authenticity of the dataset. Industry research from sources such as DoxxScan™ continuous monitoring indicates that automotive customer databases have become frequent targets because they combine traditional personally identifiable information with details that can reveal location patterns and lifestyle indicators.

For executives and high-net-worth families, the exposure carries immediate operational and personal risk. Vehicle registration data tied to home addresses can simplify physical surveillance or targeted approaches. Combined contact details enable sophisticated social engineering campaigns that reference specific car models or service history to build credibility. The scale—130,000 records—suggests the breach may affect current and former customers across multiple years, increasing the likelihood that senior professionals with long-standing luxury vehicle ownership are included.

The doxxing and identity-chain implications extend beyond the initial leak. Vehicle registration and address data function as high-confidence anchors that link disparate online handles, email addresses, and phone numbers to real-world identities. Once an attacker establishes that linkage, subsequent breaches or public records can be correlated to build detailed profiles. Credential leaks that surface in the same ecosystem often cascade into account takeovers, particularly for gaming platforms used by family members that share email addresses or phone numbers with the household. Available reporting describes how such chains frequently lead to harassment, extortion attempts, or physical security concerns for prominent individuals and their dependents.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, addresses, and real identity, using the 72hr free trial of Warden.
• Enable continuous DoxxScan monitoring across 15B+ breach records and 100+ platforms so the next exposure of your data is identified and addressed in hours rather than months.
• Rotate any passwords used on Mercedes-Benz UK customer portals or associated dealer systems wherever they have been reused, and replace them with unique credentials protected by 2FA via an authenticator app.
• Cover the entire household with DoxxScan family coverage that extends to dependents and children's gaming accounts, which frequently chain back to the same addresses and contact details exposed in breaches of this type.
• For executives and family offices, layer on hands-on remediation specialists who can execute targeted takedown requests across data brokers and underground marketplaces where leaked vehicle and residence information may propagate.

Organizations and families that treat every exposed customer database as the start of an identity chain rather than an isolated event will maintain better control over their exposure surface. DoxxScan by GalaxyWarden delivers that capability through continuous monitoring across 15B+ breach records and 100+ platforms, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage that explicitly includes children's gaming accounts vulnerable to credential-stuffing attacks that follow leaks like this one.