November 3, 2026: Mavis Tire Supply LLC, which runs the Mavis Discount Tire and Mavis Tires & Brakes chains, filed data breach notices with the Texas and Vermont Attorneys General, after an earlier report to South Carolina. Mavis says it became aware of unauthorized access to its IT systems on June 18, 2025. The filings list Social Security numbers, driver's licence numbers and medical information. The catalog entry, which earlier recorded only an unverified leak-site listing, has been updated.
What happened
According to the state filings and press reports, Mavis detected unauthorized access to its IT systems on June 18, 2025. A law-firm release gives an access window of May 14 to July 16, 2025. Notices to individuals and regulators went out around November 3, 2026, about sixteen months after discovery. Mavis has not explained the delay or made a public statement.
In September 2025 the WorldLeaks extortion group listed Mavis on its leak site. The company has not commented on that claim, and the notices do not name an attacker.
What data was involved
- Texas filing (4,588 Texans): names, addresses, Social Security numbers, driver's licence numbers, medical information and dates of birth.
- Vermont filing (85 Vermonters): Social Security numbers, government ID numbers, financial account and card information, and health records.
A law firm puts the total at about 71,774 people, including employees and customers. That figure does not come from a regulator and is unconfirmed. The medical and financial data suggest employee benefits and payroll records may be involved, not just customer files.
Verified and unverified
- Confirmed by state filings: unauthorized access discovered June 18, 2025; the data types above; 4,588 Texans and 85 Vermonters notified.
- Unverified: the 71,774 total, the WorldLeaks link, and larger record counts quoted by aggregator sites. Georgia's Consumer Protection Division says it is monitoring the breach.
Who is at risk
Current and former Mavis employees, and customers whose records held identity or payment details. Mavis has more than 700 locations across 13 states. With Social Security and driver's licence numbers together, the main risks are new-account fraud, tax-refund fraud and loans taken out in your name.
What to do
- Read any letter from Mavis and enrol in any credit monitoring it offers.
- Freeze your credit with Equifax, Experian and TransUnion.
- Get an IRS Identity Protection PIN, especially if you are a current or former employee.
- Check your credit reports and any health insurance statements for activity you do not recognise.
- Watch for phishing about tyre orders, service appointments or refunds that uses your real details.
Sources
- Vermont Attorney General, Security Breach Notices (listing dated November 3, 2026)
- Macon Telegraph via Yahoo, "Georgia Consumer Protection Division monitoring data breach affecting Mavis Tire," November 4, 2026
- Edelson Lechtzin LLP release, November 4, 2026
Sourcing note: the Texas figures come from the Texas Attorney General's breach report as relayed by press and law-firm coverage; we could not open the Texas portal directly. The Vermont figures were checked on the Vermont listing.