ACSC Data Breach Exposes Driver’s License Information via Third-Party Vendor On March 9, 2026, the Automobile Club of Southern California (ACSC) disclosed a data breach stemming from a security incident at DanubeNet Inc. (DSS), a third-party vendor providing driver education services. The breach exposed personally identifiable information (PII), including names and driver’s permit or license numbers, though the exact method of intrusion was not specified. ACSC’s contract with DSS required the vendor to maintain appropriate security measures. Following the discovery, ACSC collaborated with DSS to investigate the incident and implement corrective actions. DSS has since strengthened its security protocols to prevent future breaches. The breach affected six Massachusetts residents, as reported by the Massachusetts Office of Consumer Affairs and Business Regulation, and was also disclosed to the California Attorney General. In response, ACSC offered affected individuals a complimentary two-year membership for credit monitoring and identity protection services through Epiq, including credit monitoring with alerts, annual credit reports, dark web monitoring, $1 million in identity theft insurance, and identity restoration support. Enrollment instructions were provided in notification letters, with no impact on credit scores. While ACSC advised vigilance in monitoring accounts and credit reports, the exposed driver’s license numbers heighten the risk of identity theft, underscoring the need for affected individuals to consider additional safeguards like fraud alerts and security freezes.