Automobile Club of Southern California (ACSC) data breach
The Automobile Club of Southern California (ACSC) reported a data breach to the Indiana Attorney General in March 2026, confirming exposure of sensitive personal and financial data. This incident affects individuals whose Full Name, Social Security Number, Date of Birth, Driver's License Number, Insurance Policy Number, Financial Account Number, Mailing Address, and Payment Card Information may have been compromised.
Docket sheet
- Company
- Automobile Club of Southern California (ACSC)
- Venue
- Indiana Attorney General
- Filed
- March 9, 2026
- People affected
- Not stated
- Status
- Monitoring
Where this breach stands
- 1
Breach occurredJuly 10, 2025
Date of the incident as stated in the filing.
- 2
Reported to the Indiana Attorney GeneralMarch 9, 2026
The company filed a breach notification with the state regulator.
- 3
Attorney reviewCurrent stage
Current status: Monitoring. Our office is reviewing whether affected people may have claims.
- 4
Your case review
Got a letter about this breach? Submit it for a free, confidential review.
Information listed in the filing
- Full Name
- Social Security Number
- Date of Birth
- Driver's License Number
- Insurance Policy Number
- Financial Account Number
- Mailing Address
- Payment Card Information
Clerk's notes
On March 9, 2026, the Automobile Club of Southern California (ACSC) formally notified the Indiana Attorney General's office of a security incident that occurred on July 10, 2025. The regulatory filing indicates that an unauthorized compromise of the organization's network infrastructure led to the exposure of confidential consumer data. The investigation into the full scope and impact of this breach is currently under monitoring.
The compromised data categories include individuals' Full Name, Social Security Number, Date of Birth, Driver's License Number, Insurance Policy Number, Financial Account Number, Mailing Address, and Payment Card Information. Such a combination of exposed data creates a significant risk for affected individuals, potentially enabling identity theft, financial fraud, and unauthorized account access.
Organizations like ACSC, which manage extensive sensitive customer data, are required to implement robust security measures to prevent unauthorized disclosure. A data breach of this nature suggests potential failures in maintaining these necessary safeguards, raising questions about the protection provided for sensitive member and customer information. Affected individuals may face increased risks related to their financial and personal security for an extended period.
If you received a data breach notification letter from ACSC, it confirms your information was involved in this incident. Receiving this notice establishes a basis for further inquiry into your legal options. You do not need to have already experienced financial loss or identity theft to seek a review of your situation. Consider exploring the potential impact of this breach on your personal data.
Individuals impacted by this Automobile Club of Southern California data breach are encouraged to learn more about their rights. A free case review can help clarify the implications of this incident and available next steps.
If a notification letter about this breach reached you, see every Indiana data breach on file or browse all cases.
Other Indiana docket entries
- Bozeman School DistrictIndiana AG—Investigation Open
- Bozeman School DistrictIN AG—Investigation Open
- Teamsters Local 17Indiana AG—Investigation Open
- Teamsters Local 17IN AG—Investigation Open
- BankIndiana AG—Investigation Open
- BankIN AG—Investigation Open
- Big Red LiquorsIndiana AGNovember 5, 2026Monitoring
- 5Sites Medical LLCIndiana AGNovember 2, 2026Monitoring
Attorney advertising. A docket entry reflects a public regulator filing and our review status; it does not mean a lawsuit has been filed. Submitting a review request does not create an attorney-client relationship.