AAA (the American Automobile Association) suffered a data breach affecting 11.2 million members after a threat actor group calling itself "Scattered LAPSUS$ Hunters" compromised the organization through a supply chain attack on the Salesforce platform. The attack was one of roughly 39 breaches attributed to the same group in October 2025. The attackers released a sample of the stolen database on October 3, 2025, and stated the full dataset would be published on October 10, 2025. The exposed records include full names, email addresses, phone numbers, and home mailing addresses. Membership details were also present, including membership level, status, type, join date, renewal date, and years of membership. Because AAA members typically enroll to receive roadside assistance and insurance-related services, this data carries a strong implication of vehicle ownership and home location, making affected individuals vulnerable to phishing, roadside-assistance impersonation scams, vehicle-linked fraud, and targeted household schemes. AAA had not made detailed public statements about the scope of its specific exposure as of the known reporting period. No regulatory actions or individual notifications had been publicly confirmed at the time of indexing. Affected members should treat unsolicited contact referencing their AAA membership, vehicle, or home address with extreme caution, particularly requests that invoke urgency around roadside or insurance services.

Automobile club membership platforms collect member identity, contact details, vehicle data, billing records, roadside-assistance history, travel-related activity, and household-linked records across membership services.

AAA has been expanding its digital service capabilities, including mobile roadside assistance dispatch and electric vehicle charging network partnerships as the organization adapts to the shift toward EVs. It has continued growing its insurance and travel service offerings to members. No major governance or structural changes have been prominently reported in the recent period.