CSIDB logo
Incident

Mavis Tire Supply LLC

Incident posture

Attack window
May 2025
Location
United States of America
Status
Unknown
CIA posture
Available to members
Updated
2026-11-08 00:16

Linked entities

Victim
Mavis Tire Supply LLC
Threat actors
1 actor
Sources
1 source

Timeline

Occurred
May 2025
Discovered
Undetermined
Disclosed
Nov 2026
Resolved
Pending

Summary

Mavis Tire Supply LLC, an automotive and tire retail platform, experienced a ransomware-related data breach claimed by the WorldLeaks group that potentially exposed the personal information of approximately 71,774 individuals, including employees and customers. The compromised data may have included names, addresses, Social Security numbers, and driver's license numbers, and the company notified affected individuals after the incident was reported. A national class action law firm is investigating potential legal claims arising from the exposure, while certain details about the full scope and the attacker's identity remain unconfirmed.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

Mavis Tire Supply LLC, a leading automotive and tire retail platform, experienced a reported ransomware-related data breach that occurred between May 14, 2025, and July 16, 2025. The incident was publicly disclosed on or about November 3, 2026, when the company notified affected individuals and reported the breach. The ransomware attack was reportedly claimed by the WorldLeaks group, though certain details of the incident, including the full scope and the attacker's identity, remain unconfirmed or have not been publicly detailed. Approximately 71,774 individuals may have had their personal information compromised, potentially including both employees and customers who use Mavis Tire Supply LLC services. Based on public accounts and regulatory filings, the information potentially involved varied by individual and included names, addresses, Social Security numbers, and driver's license numbers. The breach was described in a press release issued by Edelson Lechtzin LLP on November 4, 2026, which stated that the firm is investigating data privacy claims arising from the reported incident. The law firm indicated that anyone who received a data breach notice from Mavis Tire Supply LLC, or who believes their personal information may have been exposed, can request a free case evaluation. The investigation focuses on Mavis Tire Supply LLC and individuals affected by the breach, with attention to the increased risk of identity theft and fraud that affected individuals may face.

The potential exposure of names, addresses, Social Security numbers, and driver's license numbers places affected individuals at risk of identity theft and fraud. Edelson Lechtzin LLP is investigating a potential class action to pursue legal remedies on behalf of individuals whose sensitive personal data may have been compromised in the reported breach. A successful case could recover compensation for losses such as lost time, out-of-pocket costs, and loss of privacy, and could push Mavis Tire Supply LLC to strengthen how it protects personal information. The firm will evaluate the rights and potential claims of affected individuals at no cost. The reported data breach and certain details concerning it remain unconfirmed according to the legal notice in the press release. The company notified affected individuals as part of its disclosure process. The status of the incident includes unresolved questions about the full scope and the identity of the attacker. The breach investigation by the law firm encompasses investors, tenants, partners, and others whose personal information may have been exposed. The press release serves as attorney advertising in some jurisdictions and notes that prior results do not guarantee a similar outcome.

Sources

Sources available to members: 1 source.

CSIDB