Yorozu Automotive Tennessee Discloses Major Data Breach Affecting Over 20,000 Individuals Yorozu Automotive Tennessee Inc., a U.S. subsidiary of Japan-based Yorozu Corporation, reported a significant data breach that compromised the personal and sensitive information of 20,627 individuals across the United States. The breach, which occurred on October 9, 2024, exposed a wide range of data, including: - Personally Identifiable Information (PII): Full names, home addresses, dates of birth, Social Security numbers, driver’s license numbers, government-issued IDs, and financial details such as credit/debit card numbers and account access codes. - Employment-Related Data: W-2 tax forms and pay stubs. - Protected Health Information (PHI): Medical and health records. Notifications to affected individuals began on June 2, 2026, nearly two years after the incident. The breach impacted residents in multiple states, with 22 in Indiana, eight in Massachusetts, and one in Vermont among those affected. In response, Yorozu Automotive Tennessee is offering 24 months of free identity theft protection through IDX, including credit monitoring, CyberScan monitoring, a $1 million insurance reimbursement policy, and fully managed identity recovery services. Affected individuals must enroll by September 2, 2026, using a unique code provided in their notification letters. The company has also set up a dedicated assistance line for breach-related inquiries, available weekdays from 9 a.m. to 9 p.m. Eastern Time.