> customer name, address, vehicle make and model, vehicle identification number (VIN), credit score, loan amount and monthly payment If that turns out to reall

> customer name, address, vehicle make and model, vehicle identification number (VIN), credit score, loan amount and monthly payment If that turns out to really be the only affected info, does this actually have identity theft implications? It compromises access to NCF accounts, I suppose, but while there's some info that would normally be private (loan amounts, credit score), I don't see any truly sensitive info here. Notably, no SIN, work info, income amounts, or other things you'd expect on a credit application. Basically, as of now it looks like the post-approval payment tracking system got breached, not the actual approval system.