Advance Auto Parts
Disclosed Jun 14, 20242,316,591 affectedConfirmed
Snowflake-linked breach exposes data of 2.3 million applicants and employees
Advance Auto Parts reported to the SEC that on May 23, 2024 it identified unauthorized activity in a third-party cloud database, and data was offered for sale on June 4. State filings later showed 2,316,591 current and former job applicants and employees had Social Security numbers, ID numbers and birth dates exposed.
What is known
| People affected | 2,316,591 (as reported by the organization) |
|---|---|
| Disclosed | Jun 14, 2024 |
| Discovered | May 23, 2024 |
| Happened | Jun 5, 2024 |
| Attack | Credential stuffing |
| Data exposed | EmailsNamesPhone numbersAddressesSocial Security numbersGovernment IDsDates of birthEmployment |
| Sector | Retail · US |
| Status | Confirmed |
| Part of | Snowflake (2024) |
| Check your email | Have I Been Pwned |
Sources
Notices filed
Same campaign
Other breaches at Advance Auto Parts
History of this record
aggregator to filingby seedSource
https://haveibeenpwned.com/Breach/AdvanceAutoParts to https://www.sec.gov/Archives/edgar/data/1158449/000115844924000162/aap-20240523.htmby seedSource
disclosed to confirmedby seedSource
empty to researchby seedSource
0 to 1by seedSource
empty to snowflake-2024by seedSource
empty to USby seedSource
tech to retailby seedSource
insider to credential-stuffingby seedSource
["emails","names","phone","addresses"] to ["emails","names","phone","addresses","ssn","government-id","dob","employment"]by seedSource
hibp to organizationby seedSource
79243727 to 2316591by seedSource
2024-06-24 to 2024-06-14by seedSource
empty to 2024-05-23by seedSource
In June 2024, Advance Auto Parts confirmed they had suffered a data breach which was posted for sale to a popular hacking forum. Linked to unauthorised access to Snowflake cloud services, the breach exposed a large number of records related to Advance Auto Parts reported to the SEC that on May 23, 2024 it identified unauthorized activity in a third-party cloud database, and data was offered for sale on June 4. State filings later showed 2,316,591 current and former job applicantsby seedSource
empty to Snowflake-linked breach exposes data of 2.3 million applicants and employeesby seedSource
First recordedby backfillSource
First seen 2026-09-25 (Have I Been Pwned), confirmed by Research. Record counts are as reported. Not legal advice.