{"id":239675,"date":"2026-11-11T11:11:37","date_gmt":"2026-11-11T19:11:37","guid":{"rendered":"https:\/\/www.mcafee.com\/blogs\/?p=239675"},"modified":"2026-11-12T12:53:45","modified_gmt":"2026-11-12T20:53:45","slug":"mavis-tire-data-breach","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/security-news\/mavis-tire-data-breach\/","title":{"rendered":"Mavis Tire Data Breach Hits SSNs and Health Records: What to Do If Your Data Was Exposed"},"content":{"rendered":"

Mavis Tire Supply LLC, the company behind Mavis Discount Tire, has disclosed a data breach involving Social Security numbers, government ID numbers, financial account information, and health records. The company reported the breach to the Vermont Attorney General<\/a> on November 3, 2026, and is notifying affected people by mail.<\/p>\n

The breach is more than a year old. Mavis says it detected unauthorized access on June 18, 2025, according to the sample notification letter it filed in Massachusetts<\/a>, and the Worldleaks ransomware group claimed the attack that September. Now that letters are in the mail, the next risk is scammers who copy them to collect the same information that was exposed.<\/p>\n

What Happened in the Mavis Tire Data Breach?<\/strong><\/h2>\n

Mavis says it detected unauthorized access to its IT environment on June 18, 2025. According to the company’s sample notification letter<\/a>, a “criminal third party had copied certain data,” and Mavis brought in outside counsel and a forensics firm to review what was taken.<\/p>\n

On September 23, 2025, the Worldleaks ransomware group claimed the attack, according to HookPhish<\/a>. Mavis reported the breach to the Vermont Attorney General<\/a> on November 3, 2026, about 16 months after it detected the intrusion, and listed 85 Vermont residents in that filing.<\/p>\n

The letter does not explain why notification took that long, and it says Mavis is “not aware of any misuse” of personal information.<\/p>\n

What Did the Worldleaks Ransomware Group Take?<\/strong><\/h3>\n

Mavis has not said what Worldleaks took, and the group’s claim is not proof of what it holds. The best public record of what was exposed is the list of data categories Mavis filed with state regulators.<\/p>\n

What Data Was Exposed in the Mavis Discount Tire Breach?<\/strong><\/h2>\n

The Vermont filing lists five categories of data, including health records. Each letter lists the specific information Mavis found for that recipient.<\/p>\n\n\n\n\n\n\n\n\n
Data Category<\/strong><\/td>\nWhy It Matters<\/strong><\/td>\n<\/tr>\n
Social Security numbers<\/strong><\/td>\nCan be used to open credit, file a tax return, or claim benefits in your name.<\/td>\n<\/tr>\n
Government ID numbers<\/strong><\/td>\nCan help a scammer pass identity checks or impersonate you.<\/td>\n<\/tr>\n
Financial account information<\/strong><\/td>\nCan be used to target your bank accounts or make phishing messages more convincing.<\/td>\n<\/tr>\n
Credit and debit account information<\/strong><\/td>\nCan lead to unauthorized charges.<\/td>\n<\/tr>\n
Health records<\/strong><\/td>\nCan be used for medical identity theft, such as bills or insurance claims for care you never received.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Was My Information Exposed in the Mavis Discount Tire Breach?<\/strong><\/h2>\n

A notification letter from Mavis is the clearest way to know. The sample letter says the recipient’s personal information “was found during this review” of the copied data, and it lists the types of information involved for that person.<\/p>\n

If you shopped or worked at Mavis and have not received a letter, that does not rule you out, because filings are still coming in. Mavis has not posted a public statement on its social accounts. Watch your mail for a notification letter, and do not use “check my name” breach sites that ask for your Social Security number.<\/p>\n

Is the Mavis Tire Breach Notification Letter Real or a Scam?<\/strong><\/h2>\n

A real Mavis letter arrives by mail and offers free identity monitoring through a code printed on the letter. A fake data breach letter typically copies that wording and changes the link, the phone number, or what it asks you to send.<\/p>\n

How to Check a Mavis Breach Letter<\/strong><\/h3>\n

Compare any letter or message against the details in the sample letter Mavis filed with Massachusetts<\/a>:<\/p>\n