HopSkipDrive

HopSkipDrive, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-02-03. 242 Massachusetts residents were affected.

HopSkipDrive notified consumers of a data incident occurring May 31–June 10, 2023, discovered July 25, 2023, after receiving a phishing email from an unknown threat actor claiming access to third-party apps. Impacted data included names, addresses, and emails. The company engaged forensic experts and offered complimentary TransUnion credit monitoring and fraud assistance.

HopSkipDrive, Inc. notified Montana residents of a data incident where an unknown threat actor accessed third-party applications via phishing. The incident occurred May 31–June 10, 2023. Personal information including names, addresses, and emails may have been impacted. HopSkipDrive engaged forensic experts and offered complimentary TransUnion credit monitoring and fraud assistance.

HopSkipDrive, Inc. experienced a data security incident affecting personal information including name, mailing address, and email address. The unauthorized access occurred between May 31, 2023, and June 10, 2023, via third-party applications. HopSkipDrive became aware of the incident on July 25, 2023, after receiving communication from an unknown threat actor. The company engaged forensic experts, contained the incident, and is offering credit monitoring and fraud assistance to affected individuals.

HopSkipDrive, Inc. reported an external system breach that occurred on May 31, 2023, and was discovered on June 12, 2023. The incident affected 155,394 individuals, exposing their names and driver's license or non-driver identification card numbers. The company began notifying affected individuals in writing on November 14, 2023, and offered 12 months of complimentary credit monitoring and identity theft protection services through TransUnion.

HOPSKIPDRIVE filed a data-breach notice with the Illinois Attorney General in February 2024 (case 24-02-031). The register records the breach as discovered on July 27, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

HopSkipDrive, Inc. reported a supplemental data security incident to the Washington AG. Unauthorized access occurred between May 31 and June 10, 2023, discovered on June 12, 2023. The incident impacted 14,757 Washington residents, exposing names, SSNs, DOBs, driver's licenses, DoD IDs, and medical information. Notifications were mailed starting November 14, 2023.