Reads a bit like it could have been a dealership or dealer network that was breached.