Skip to content

HopSkipDrive

Disclosed Jul 27, 20233 years ago155,394 affectedConfirmed

Official notice

HopSkipDrive breach exposes personal data of 155,394 drivers

Student rideshare company HopSkipDrive told the Maine attorney general that a June 2023 cybersecurity incident exposed names, emails, postal addresses and driver's license numbers of 155,394 drivers.

What is known

People affected155,394 (as reported by the organization)
DisclosedJul 27, 2023
DiscoveredJun 12, 2023
HappenedMay 31, 2023
AttackHacking
Data exposedNames, Emails, Addresses, Government IDs
SectorTransport · US
StatusConfirmed

Sources

Notices filed

WhereFiledPeople
Washington AGresidents of WAJul 27, 202314,757
California AGresidents of CAFeb 2, 2024
Vermont AGresidents of VTFeb 3, 2024
ResearchtotalFeb 5, 2024155,394
History of this record
  • 2026-09-25 · source: empty to https://ago.vermont.gov/document/2024-02-03-hopskipdrive-data-breach-notice-consumers · backfill source
  • 2026-09-25 · sector: other to transport · seed source
  • 2026-09-25 · data_types: [] to ["names","emails","addresses","government-id"] · seed source
  • 2026-09-25 · records_basis: empty to organization · seed source
  • 2026-09-25 · records: empty to 155394 · seed source
  • 2026-09-25 · summary: empty to Student rideshare company HopSkipDrive told the Maine attorney general that a June 2023 cybersecurity incident exposed names, emails, postal addresses and driver's license numbers of 155,394 drivers. · seed source
  • 2026-09-25 · title: empty to HopSkipDrive breach exposes personal data of 155,394 drivers · seed source
  • 2026-09-25 · attack: unknown to hacking · backfill source
  • 2026-09-25 · disclosed: 2024-02-02 to 2023-07-27 · backfill source
  • 2026-09-25 · discovered: empty to 2023-06-12 · backfill source
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.

Everything about HopSkipDrive

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.