Velocity Vehicle Group operates 100+ commercial truck dealerships across the US, Mexico, Australia, and Canada with 3,000 employees and over $1 billion in revenue. The privately-owned company runs sales, financing, parts distribution, service operations, and collision repair for commercial fleets and owner-operators. The attack surface is what you'd expect from a dealership network at scale: point-of-sale systems across locations, ERP infrastructure handling inventory and financials, and customer data flowing through financing operations including a $300 million equipment portfolio managed by subsidiary Crossroads Equipment Lease and Finance.
The threat model centers on transactional systems and distributed operations. Each of the 100+ locations represents potential lateral movement risk if perimeter controls aren't segmented properly. Payment card data at POS terminals, personally identifiable information in financing applications, and supply chain dependencies for parts inventory create multiple vectors. The parts operation alone - 900 professionals managing commercial truck components - implies significant B2B integrations with manufacturers and suppliers that need monitoring.
The company's pivot into clean emissions through Velocity EV adds complexity: electric vehicle infrastructure, telematics data from connected trucks, and grant advisory services that likely involve document handling and regulatory compliance workflows. For a security team, the operational challenge is protecting legacy dealership tech while scaling controls across four countries and maintaining availability for service operations that keep commercial fleets running 24/7.
