The Washington Attorney General disclosed a data breach at Advance Auto Parts, where unauthorized actors gained access to sensitive personal information of approximately 21,791 Washington residents between April 14, 2024, and May 24, 2024. The compromised data included highly sensitive details such as names, Social Security numbers, driver’s license numbers, and dates of birth—information that significantly heightens the risk of identity theft, financial fraud, and other malicious activities. Affected individuals were formally notified via written correspondence around July 10, 2024.The breach exposes customers to long-term vulnerabilities, as the stolen data (particularly SSNs and driver’s license numbers) cannot be easily replaced or secured once leaked. The incident underscores systemic failures in safeguarding customer records, potentially eroding trust in the company’s cybersecurity measures. While the exact method of unauthorized access remains undisclosed, the scale and nature of the exposed data suggest a targeted intrusion with severe implications for those impacted. The company may face regulatory scrutiny, legal repercussions, and reputational damage as a result of this breach.

The California Attorney General reported that Advance Auto Parts experienced a data breach on March 7, 2016, due to a phishing-type attack, exposing employee information including names, Social Security numbers, and gross wages for 2015. The breach affected an unknown number of individuals, and the company is offering identity protection services to those impacted.