There are articles about Toyota, Ford, and GM having data breaches if you search for them. The difference with this one is the kind of data exposed. It's not just user location data, it appears to be some malfeasance by the company itself, an attempt to cover up issues.

There is likely something real here.