Ransomware victim disclosure
← All victimsAutoMax
listed as automax.com · Claimed by devman · listed 5 months ago
Status timeline
- Listed
Jan 21, 2026
- Data leaked
At a glance
About the victim
AI dossier — public-source company profileAutoMax.com is a used car dealership group operating in the United States, offering a wide range of pre-owned vehicles with auto inspection and warranty coverage. The company provides financing options for various credit situations and focuses on customer service through its sales staff. No additional verifiable details about scale or headquarters were available from the leak post or public site.
- Industry
- Used Car Dealership / Automotive Retail
Attack summary
Severity: medium — Data is reported as published rather than merely announced, suggesting some level of exfiltration has occurred; however, no specific data categories, volume, or proof files were described, and the leak post body appears AI-generated with no verifiable stolen-data claims, limiting severity to medium.The group 'devman' claims to have published data belonging to AutoMax.com, with the disclosure status marked as data_published. No specific details about encryption, exfiltration volume, or data categories were provided in the leak post.
Original description
AI-summarised, not from the leak postAutoMax.com is a leading used car dealership group in the US. Known for its wide range of high-quality pre-owned vehicles, AutoMax.com provides affordable options with comprehensive auto inspection and warranty. They offer financing options for all credit situations. The company is committed to delivering excellent customer service through its knowledgeable and friendly staff.
Sources
- Victim siteautomax.com
- Leak posthttp://devmanblggk7ddrtqj3tsocnayow3bwnozab2s4yhv4shpv6ueitjzid.onion
Source
Indexed 5 months agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
Is this your supplier? Your competitor? You?
Pro plans monitor your domain, corporate emails, and crypto wallets across every new ransomware leak-site post, breach dump and Telegram callout — alerts within 5 minutes.
