Advance Auto Parts data breach: 79.2M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2024-06-24
In June 2024, Advance Auto Parts confirmed they had suffered a data breach which was posted for sale to a popular hacking forum. Linked to unauthorised access to Snowflake cloud services, the breach exposed a large number of records related to both customers and employees. In total, 79M unique email addresses were included in the breach, alongside names, phone numbers, addresses and further data attributes related to company employees. Exposed data: email addresses, names, phone numbers, physical addresses. The breach dates from Jun 5, 2024; Have I Been Pwned loaded it on Jun 24, 2024.
What to do
- If you had a Advance Auto Parts account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch