Mavis Tire Data Breach Exposed Personal and Protected Health Info

Mavis Tire Supply LLC, a tire and automotive service company headquartered in White Plains, New York, disclosed a data breach that exposed sensitive personal information of consumers across multiple states.

According to its respective state attorney general filing, 4,588 Texas residents, 2,785 South Carolina residents, 1,433 Massachusetts residents and 85 Vermont residents were identified as affected. Mavis mailed notification letters to affected consumers.

On June 18, 2025, Mavis became aware of unauthorized access in the company's IT environment. Upon learning of the unauthorized access, Mavis retained legal counsel and an independent forensics firm to investigate the incident and work to secure its IT systems.

The investigation found that a criminal third party had gained access to the company's systems and copied certain data. Mavis then undertook a comprehensive review of the compromised data to identify what personal information may have been exposed.

On Sept. 23, 2025, a threat actor group known as Worldleaks posted a claim on the Tor network saying it had leaked data from Mavis Tire.

The personally identifiable information (PII) that may have been exposed includes Social Security numbers, government ID numbers (including driver's licenses), financial account information and credit and debit card numbers.

The breach also potentially exposed protected health information (PHI) in the form of medical or health records.

Mavis Tire's response to the breach

Mavis is offering affected individuals 24 months of free identity monitoring services through Kroll, a global leader in risk mitigation and response.

Affected individuals can activate their identity monitoring services by visiting Kroll's enrollment website and entering the membership number included in their notification letter.

Mavis has also set up a dedicated call center for questions at 844-301-0180, available Monday through Friday from 9 a.m. to 6:30 p.m. Eastern Time.