PHP Vulnerability Responses by Company

General Motors LLC

Companies / web services
Aliases / services
General Motors / GM Rewards / ゼネラルモーターズ / General Motors LLC
Official website
https://www.gm.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

GM online accounts and rewards

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

Suspicious logins using externally obtained credentials and unauthorized reward redemptions occurred during April 11–29, 2022. Contacts, location and activity data could be accessed; the accounts held no Social Security or banking information.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Reset your GM password and change it on other services where it was reused. Contact official support about unauthorized reward redemptions and restoration.

Official service URL

Source URLs

  1. Official operator evidencehttps://experience.gm.com/rewards/termsService and operation documentation
  2. 2022-05-16 official noticehttps://oag.ca.gov/system/files/2022-05-16%20-%20version%20A%20notice%20to%20individuals.pdfService and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies General Motors LLC and the relevant scope.
  2. 2022-05-16 official noticeOfficial notice; link to this PHP incident unconfirmedConfirms incident scope and guidance for affected people.

Comments