DisclosureLens
HackingEducationTransportation & LogisticsEducationSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDMediumContained

AAA Driver Training Store

bd_3d676b2b2e43d0ea · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 1, 2025

Filed

Mar 5, 2026

To disclose

13 weeks

Affected

Not disclosed

Confidence

65%
Full breach record for AAA Driver Training Store

AAA Driver Training School, Inc. (DTS), an affiliate of AAA Northeast, notified customers of a data breach involving a third-party driving school software vendor. In late December 2025, the vendor discovered unauthorized third-party access to systems containing student personal information. The vendor terminated the access and remediated the system. Affected data included student names, contact information, dates of birth, and driver permit/license numbers. No payment card information was impacted. DTS is reviewing security measures and has offered 12 months of complimentary Experian IdentityWorks to affected individuals. The incident was reported to federal law enforcement and state regulators.

Incident timeline

discovery → filing · 13 weeks / 94 days

Dec 1, 2025

Discovered

Mar 5, 2026

Filed

vs. sector median

+5 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.