On September 10, 2026, a ransomware group reportedly claimed responsibility for compromising systems tied to Harley-Davidson and possessing customer data. The report originated from a dark-web monitoring listing, and Harley-Davidson had not publicly confirmed that a data breach occurred at the time of reporting.
The number of affected individuals and the categories of information allegedly obtained have not been disclosed. Available reports do not establish whether Social Security numbers, medical information, financial information, or other specific data types were involved. The scope and details of the reported incident may change as further information becomes available.