Mavis Tire Supply LLC, which operates as Mavis Discount Tire and is based in White Plains, New York, has reported a data security incident to the Texas Attorney General. The filing says personal information, including Social Security numbers, driver’s license numbers and medical information, was affected.
A company that keeps sensitive personal data on customers and employees has a responsibility to protect it. This page summarizes what the public record shows so far.
Mavis Tire Supply LLC’s Data Breach Investigation
On November 3, 2026, the Texas Attorney General’s office published a data security breach report naming Mavis Tire Supply LLC, with an address on Hillside Avenue in White Plains, New York. Texas requires organizations to report certain breaches involving Texas residents to the state, and the office posts those reports in a public listing. The entry is the main confirmed public source of information about this notice.
According to the entry, 4,588 Texans were affected. That number counts only Texas residents. Mavis operates in many states, so the total number of people affected nationwide could be higher, and the company has not published an overall count. The entry also states that notice was provided to consumers and that it was sent by U.S. Mail. People who were affected may already have received a letter or may receive one soon.
The Texas record lists six types of information affected: names, addresses, Social Security numbers, driver’s license numbers, medical information and dates of birth. It does not say which items apply to which person. In most breaches the mix varies by individual, so one person may have had only a name and a driver’s license number involved while another had a longer list. A Social Security number combined with a date of birth and an address is the set of details criminals most often need to commit identity fraud.
The Texas entry does not explain what happened. It does not say whether the cause was a network intrusion, a ransomware attack, a phishing email, a mistake by an employee or a problem at a vendor. It also does not say when the incident took place or when the company found out. This page does not guess at those details.
Mavis has appeared in public reporting about data security before. Third-party breach trackers have reported that a ransomware group called WorldLeaks claimed an attack on the company, with a systems disruption first detected on September 23, 2025. Two proposed class action lawsuits, Bunch v. Mavis Tire Supply LLC and Kearins v. Mavis Tire Supply LLC, were filed in the U.S. District Court for the Southern District of New York on October 22, 2025. Those reports and lawsuits are described by outside sources, and the Texas filing does not say whether this November 2026 notice relates to that earlier matter. This page treats it only as background and does not assume the two are the same incident.
Medical information is an unusual item to see in a filing from a tire and auto service company. It is more commonly held for people on an employer’s health benefits plan, such as current and former employees and their family members, or in connection with workers’ compensation or leave requests. That is a general observation about how employers handle records, not a confirmed statement about who was affected here. A notice letter, if you receive one, should say how your information was involved.
Social Security numbers and driver’s license numbers are among the most sensitive kinds of personal information. Unlike a password, a Social Security number cannot easily be replaced, and it can be used to open accounts, file false tax returns, apply for credit or seek medical care in someone else’s name. Stolen data can be used or sold months after an incident, and scam messages that cite real personal details can look believable.
If Mavis later publishes a fuller notice, files with other state attorneys general or releases details about the cause and timeline, those sources will be the most reliable basis for understanding the scope of the incident. Until then, the Texas filing is the only confirmed information about this notice, and this page reflects what the public record supports.
When Did This Breach Occur?
The Texas Attorney General’s office published the report on November 3, 2026. The filing does not list the date the incident happened or the date Mavis discovered it, and the company has not published a timeline for this notice.
Because notice was sent by mail, the letters would typically be dated shortly before the report was posted. Breach notice letters usually state both the dates of unauthorized activity and the date the company learned of it, so the letter is the best source for those facts.
What Information Was Breached?
The Texas record lists names, addresses, Social Security numbers, driver’s license numbers, medical information and dates of birth.
The filing does not break these down by person, so not everyone affected necessarily had every type of information involved. Your notice letter, if you receive one, should say which items related to you.
What You Can Do
If you received a notice from Mavis or believe you may be affected, consider these steps:
- Read the notice carefully and keep it, along with any enrollment details for credit monitoring or identity protection it offers.
- Place a free fraud alert or credit freeze with Equifax, Experian and TransUnion, and get your credit reports free at annualcreditreport.com.
- Review bank and card statements, and any health insurance explanation of benefits, for anything you do not recognize.
- Consider an IRS Identity Protection PIN, since Social Security numbers are used in tax fraud.
- Be skeptical of unexpected calls, texts or emails that mention the incident, and report suspected identity theft to the Federal Trade Commission at identitytheft.gov.
File a Data Breach Lawsuit Against Mavis Tire Supply LLC
If you received a notice from Mavis Tire Supply LLC, you may have legal options. A data breach lawsuit can seek compensation for the loss of privacy, the time spent protecting yourself and any out-of-pocket costs, and can press a company to improve how it safeguards personal information. Whether a claim makes sense depends on the facts of the incident, which are still limited. Keep your notice letter and any records of suspicious activity or expenses, since they may matter later.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
