UnknownFinancial ServicesFinanceIdentity (basic)Government IDMediumActive

Credit Acceptance Corporation

bd_7b61fe994ad1ff76 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 30, 2026

To disclose

—

Affected

1state residents only

Confidence

67%

Full breach record for Credit Acceptance Corporation →2 incidents on file

Credit Acceptance Corporation notified Massachusetts residents of a data security incident on June 4, 2026. The incident involved the unauthorized access of personal information, specifically names and Social Security numbers. The company contacted law enforcement, engaged cybersecurity firms, and is offering 24 months of complimentary identity monitoring through Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jun 30, 2026

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Credit Acceptance Corporation
norm: credit acceptance
Domain: creditacceptance.com

Name: Credit Acceptance Corporation
norm: credit acceptance
Domain: creditacceptance.com
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown

During the incident: Contacted law enforcement
Engaged leading cybersecurity firms to assist us in assessing the incident’s scope and cause
Offering identity monitoring services through Kroll for a period 24 months
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1067-credit-acceptance-corporation/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 30, 2026
Raw hash: 4a2d05c49013979a0e0d538c1e6c35af2b60c3d8d3b18d811522aa9fe8ef1dd3

Reporting entityCredit Acceptance Corporation

Victim entityCredit Acceptance Corporation

IncidentUnknown

Stated responseContacted law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov