HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHighContained
ADVANCE STORES COMPANY, INCORPORATED
bd_699d2fe90e095368 · schema v1 · pii pii-v1
Full breach record for ADVANCE STORES COMPANY, INCORPORATED →Advance Stores Company, Inc. (Advance Auto Parts) notified Delaware residents that an unauthorized third party accessed Snowflake cloud storage between April 14 and May 24, 2024. The incident exposed names, Social Security numbers, and driver's license numbers of approximately 6,693 Delaware residents. Advance Auto Parts terminated access, notified law enforcement, and provided 12 months of credit monitoring via Experian.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_2136d1e78c22a08fVermont State AGfiled 2024-07-10Verified
- bd_879fd3f910e4606aNew Hampshire State AGfiled 2024-07-10Verified
- bd_b687cfd83b56a492California State AGfiled 2024-07-10Verified
- bd_bc5881d478a60678Oregon State AGfiled 2024-07-10Verified
Show 1 more filing ↓Show fewer ↑
- bd_ca64838043f7afceMaine State AGfiled 2024-07-10Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2024/07/Advance-Auto-Parts-Inc.-Notice-of-Data-Event-DE.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 10, 2024
- Raw hash
- 10759de86b927ea2af07c5d9e62a20f287d290ab8ac444577cdecf8df9802d6e
Reporting entity
- Name
- ADVANCE STORES COMPANY, INCORPORATEDnorm: advance stores
Victim entity
- Name
- ADVANCE STORES COMPANY, INCORPORATEDnorm: advance stores
Incident
- Discovered
- May 23, 2024
- Materiality determined
- —
- Notification sent
- Jul 10, 2024
- Affected individuals
- 6,693
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- notified federal law enforcement regarding the eventproviding written notice of this incident to relevant state regulators
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(48 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.