The Automobile Club of Southern California (ACSC) notified the Indiana Attorney General in March 2026 about a data security incident that exposed private member information. The breach, which ACSC discovered on July 10, 2025, involved unauthorized access to their network infrastructure. The company's investigation into the unspecified breach type is currently being monitored.
The exposed data includes highly sensitive personal and financial details. The categories of information reported as compromised are Full Name, Social Security Number, Date of Birth, Driver's License Number, Insurance Policy Number, Financial Account Number, Mailing Address, and Payment Card Information.
This combination of exposed data types creates a significant risk for those affected. With information like Social Security Numbers, driver's license numbers, and financial account details in the wrong hands, individuals face a heightened risk of identity theft, fraudulent financial transactions, and other forms of cybercrime that can be difficult and costly to resolve.
As a provider of insurance and financial services, ACSC has a legal obligation to protect its members' sensitive data with robust security measures. The occurrence of this data breach suggests potential shortcomings in these safeguards, prompting questions about whether ACSC fully met its duty of care to protect the confidential information entrusted to it.
If you received a notification letter from Automobile Club of Southern California (ACSC) regarding this data breach, your personal information was likely exposed. You may be eligible to pursue a class action claim to seek compensation for the risks and potential harm caused by this incident. We offer a free, no-obligation case review to help you understand your legal options.