2026 CB Squared Services (Jiffy Lube VA) — network file theft Apr 30–May 7; names/SSNs
Data compromised
Names and Social Security numbers (company AG notice)
Technical writeup
Verified regulator notice — CB Squared Services Inc. (Virginia Jiffy Lube operator for Fredericksburg/Northern Virginia) disclosed to the New Hampshire Attorney General on July 7, 2026 (ClaimDepot Aug 4, 2026). Investigation found unauthorized network access between April 30 and May 7, 2026, during which copies of certain files were taken. File review concluded June 25, 2026 that compromised files contained names and Social Security numbers. Consumer letters began July 7, 2026 with Epiq Privacy Solutions credit monitoring. Nationwide headcount not disclosed in the NH filing — recordsAffected 0. Small verified employee/customer-data incident; no blog.
Root cause
Unauthorized network access Apr 30–May 7, 2026; files containing names and SSNs copied (NH AG notice July 7, 2026)