Vehicle identification numbers (VINs) leaked: what it means and what to do
Risk level: medium. Can you change it: no. Found in 2 breaches in this directory.
What this data is
The unique 17 character code assigned to a vehicle, used for registration, insurance, recalls, finance, servicing and vehicle history checks.
The risk on its own
A VIN is often visible through the windscreen, so it is not secret. It can still be misused to create fake sale listings or clone a vehicle identity. It does not unlock your car or reveal your identity by itself.
The risk combined with other data
With your name, address and registration plate, a VIN makes vehicle fraud more convincing. Criminals can use real details to advertise a car they do not own or to disguise a stolen vehicle. Scammers may also use it to send accurate looking recall, finance or insurance messages.
How criminals use it
A stolen car of the same model is given your VIN to disguise it before sale.
A fake online listing uses your car's VIN and photos to take deposits from buyers.
A recall scam quotes your VIN and asks you to pay for urgent repairs.
A finance scam claims there is money owing on your vehicle.
What to do now
Check official recalls using your VIN through the manufacturer or a government recall site.
Watch for registration, toll or fines notices for places you have not been.
Contact your registration authority if you suspect your vehicle identity has been cloned.
Verify finance or insurance messages by contacting the provider directly.
Keep records of your vehicle registration and purchase documents.
Frequently asked questions
Is my VIN private?
Not entirely. It is often visible on the vehicle, but it should still not be shared unnecessarily.
Can someone steal my car with my VIN?
Not directly. A VIN does not unlock or start your car, but it can be used in vehicle cloning fraud.
What is vehicle cloning?
It is when criminals copy the identity of a legitimate vehicle to disguise a stolen or illegal one.
Breach data sourced from Have I Been Pwned, used under CC BY 4.0. Additional breach metadata provided by XposedOrNot. DataExposed is an independent service and is not affiliated with or endorsed by either.