Auto auctioneer Barrett-Jackson Holdings was the victim of a data breach when suspicious activity was detected on some of its computer systems. The company discovered the breach on July 1, 2025, but further investigation revealed that the incident took place on or around Nov. 25, 2024.
During this cyber incident, unauthorized actors copied certain files from Barrett-Jackson’s systems.
A thorough review of the affected files determined that a wide range of sensitive information was exposed: names, addresses, Social Security numbers, driver’s license numbers, passport numbers, state ID card numbers, government-issued ID numbers, financial account numbers, routing numbers, payment card information, and digital signatures/authentication.
In addition, protected health information (PHI) was also compromised, including COVID-19 vaccine/results and health insurance information. Financial documents containing account numbers were also among the data accessed.
The breach impacted individuals across several states. In Texas, 1,794 people were affected, while Maine reported 65 affected residents and New Hampshire reported 83.
The company notified consumers of the incident by U.S. Mail on July 31, 2025. The breach was disclosed to state regulators, including the Maine Attorney General, Texas Attorney General, California Attorney General, Vermont Attorney General, and New Hampshire Attorney General.
Barrett-Jackson is offering twelve months of complimentary credit monitoring services through TransUnion. This service provides alerts for changes to an individual’s credit file, proactive fraud assistance, and access to a single bureau credit report and credit score. Affected individuals must enroll within ninety days of receiving their notification letter to take advantage of these services.
Given the type of information exposed, it is especially important for those affected to remain vigilant. Individuals should closely monitor their account statements and credit reports for suspicious activity. Placing a fraud alert or credit freeze on credit files is also recommended to help prevent unauthorized use of personal information.
The notification letter provides detailed instructions on how to enroll in credit monitoring, request free credit reports, and place fraud alerts or credit freezes.
If individuals have questions or need assistance, they can contact the dedicated call center at 833-397-5880, Monday through Friday from 8 a.m. to 8 p.m. Eastern Time, excluding holidays. Additional resources and guidance are included in the consumer notice, which is available at the bottom of this page in PDF format.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.