CarMoney cyberattack disrupts payments and account access

Attackers successfully compromised CarMoney systems during 17-18 February 2025. CarMoney confirmed that its IT infrastructure had been hacked and that it shut down all systems after attackers used company channels to send false messages to customers. The website and application became unavailable, payments could not be made through normal channels, and customers later continued to report payment disruptions and account-access problems; CarMoney waived late-payment penalties associated with the incident. Ukrainian Cyber Alliance self-claimed responsibility and alleged destructive activity and large-scale data compromise, but those claims were not independently verified.