Ransomware.live reported on September 22, 2026, that the Settra ransomware group listed Universal Auto Group as a victim. The report described documents allegedly obtained from Universal Auto Group and referenced two Washington state locations, but the company has not been publicly confirmed as acknowledging the incident in the sources reviewed.
The number of affected individuals and the specific information involved, including whether Social Security numbers, medical information, or financial information were exposed, have not been publicly disclosed. No official breach notification, regulator filing, consumer notice, or litigation was identified in the sources reviewed. Further details may emerge as the incident is investigated.