AutoZone, Inc.

autozone.com

AutoZone, Inc. notified the Washington AG of a cyberattack involving the MOVEit Transfer application. An unauthorized third party exploited a vulnerability to exfiltrate personal information, including names, SSNs, and DOBs, affecting 2,509 Washington residents. The incident was discovered on June 5, 2023, and AutoZone offered 12 months of credit monitoring.

AutoZone, Inc. notified Vermont consumers of a data breach involving the MOVEit file transfer application. An unauthorized third party exploited a vulnerability in MOVEit on or about August 15, 2023, to exfiltrate personal information. AutoZone contained the incident, disabled the application, rebuilt the system, and patched the vulnerability. Affected individuals were offered credit monitoring services.

AutoZone, Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-11-21. 2,019 Massachusetts residents were affected. The report records the breach type as electronic.

AutoZone, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2023-11-21. The breach occurred during 5/28/2023 - 5/28/2023. The breach was discovered on 11/3/2023. 184,995 individuals were affected. Notice was sent on 11/21/2023.

AutoZone, Inc. disclosed a data breach involving the exploitation of a vulnerability in the third-party MOVEit file transfer application. An unauthorized third party exfiltrated data from an AutoZone system. The incident was contained. Affected individuals may have had personal information, including potentially Social Security numbers and financial account details, compromised. AutoZone is offering credit monitoring services.

AutoZone, Inc. notified Montana residents that an unauthorized third party exploited a vulnerability in the MOVEit Transfer application to exfiltrate personal information. AutoZone determined the incident on August 15, 2023, contained the breach, disabled the application, rebuilt the system, and patched the vulnerability. Affected individuals were offered credit monitoring through Equifax.

AutoZone, Inc. reported a data breach to the Maine Attorney General, which occurred on May 28, 2023, and was discovered on November 3, 2023. The breach, described as an external system hacking incident, affected 293 Maine residents. The compromised data includes names and Social Security Numbers. Affected individuals were notified on November 21, 2023, and offered 12 months of three-bureau credit monitoring through Equifax.

AUTOZONE filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-797). The register records the breach as discovered on May 30, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.