Safetyfirst Systems LLC Discloses Data Breach Affecting Thousands Safetyfirst Systems LLC, a New Jersey-based provider of driver and fleet safety compliance services, recently disclosed a data breach that exposed sensitive personal information. The company detected suspicious activity in its server environment on January 19, 2026, prompting an immediate investigation with third-party forensic specialists. The investigation revealed that an unauthorized actor accessed a limited portion of the company’s systems between January 16 and January 19, 2026, potentially acquiring files containing personal data. The exposed information included names, Social Security numbers, and driver’s license numbers, though the specific details varied by individual. As a provider of Motor Vehicle Records (MVR) and employee compliance services to businesses, Safetyfirst Systems maintains data on behalf of its clients. The breach impacted 4,504 Texas residents and 364 Rhode Island residents, according to regulatory filings. The company reported the incident to attorneys general in Texas and California on July 23, 2026, and has since notified affected individuals via mail and a public website notice. In response, Safetyfirst Systems is offering free credit monitoring and fraud assistance through Cyberscout (a TransUnion company), including single-bureau credit monitoring, credit reports, and fraud support. Affected individuals must enroll within 90 days of receiving their notification letter. A dedicated assistance line (1-833-289-5523) is available for inquiries until the same 90-day period expires. The company has also taken steps to secure its systems and comply with regulatory reporting requirements.

The California Office of the Attorney General reported that SafetyFirst experienced a data breach on September 27, 2013, involving unauthorized access to personal information of drivers due to an unsecured FTP server. The breach was reported on June 13, 2014. The number of affected individuals and specific types of personal information accessed are unknown.