AAA Driver Training School Data Breach Exposes Personal Information of Over 25,000 Individuals Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating a cybersecurity incident involving AAA Driver Training School, Inc., a driver education provider affiliated with AAA Northeast. The breach, discovered in late December 2025, stemmed from unauthorized third-party access to systems managed by the school’s software vendor. The vendor acted to terminate the unauthorized access and secure the affected systems. By January 2026, the exposed data was identified, revealing that 25,247 individuals in Massachusetts had their sensitive information compromised. The breach was limited to AAA Northeast’s territory and did not affect other AAA Northeast data or payment card information. The incident was officially reported to the Massachusetts Office of Consumer Affairs and Business Regulation on March 5, 2026. Exposed data included driver’s licenses, contact information, dates of birth, driver permit/license numbers, and student names. Legal representatives are now reviewing potential claims for affected individuals. The breach highlights vulnerabilities in third-party vendor security within the driver education sector.