CB Squared Services Data Breach Exposes Sensitive Customer Information
CB Squared Services, Inc., a Virginia-based operator of Jiffy Lube service centers in the Fredericksburg and Northern Virginia regions, recently disclosed a data breach involving unauthorized access to its network. The incident occurred between May 1 and May 7, 2026, during which an unauthorized party exfiltrated files containing sensitive personal data.
On June 25, 2026, the company confirmed that the compromised files included names and Social Security numbers of affected individuals. Notification letters were mailed to impacted customers on July 7, 2026.
The law firm Shamis & Gentile P.A., specializing in data breach class actions, is investigating potential legal claims on behalf of those affected, with compensation eligibility under review for impacted parties. CB Squared Services has been in operation for over 40 years, providing automotive services through its locations in Virginia.
Source: https://www.claimdepot.com/investigations/cb-squared-services-data-breach-2026
CBS Squared Inc. cybersecurity rating report: https://www.rankiteo.com/company/cbs-squared-inc.
"id": "CBS1785860987",
"linkid": "cbs-squared-inc.",
"type": "Breach",
"date": "5/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Automotive Services',
'location': 'Virginia, USA',
'name': 'CB Squared Services, Inc.',
'type': 'Company'}],
'customer_advisories': 'Notification letters mailed to impacted customers on '
'July 7, 2026',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Names, Social '
'Security numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personal Identifiable '
'Information (PII)'},
'date_detected': '2026-06-25',
'date_publicly_disclosed': '2026-07-07',
'description': 'CB Squared Services, Inc., a Virginia-based operator of Jiffy '
'Lube service centers, disclosed a data breach involving '
'unauthorized access to its network. The incident resulted in '
'the exfiltration of files containing sensitive personal data, '
'including names and Social Security numbers.',
'impact': {'data_compromised': 'Names, Social Security numbers',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action investigation'},
'investigation_status': 'Ongoing (legal investigation by Shamis & Gentile '
'P.A.)',
'references': [{'source': 'CB Squared Services Data Breach Notification'}],
'regulatory_compliance': {'legal_actions': 'Potential class action '
'investigation'},
'response': {'communication_strategy': 'Notification letters mailed to '
'impacted customers',
'third_party_assistance': 'Shamis & Gentile P.A. (legal '
'investigation)'},
'title': 'CB Squared Services Data Breach Exposes Sensitive Customer '
'Information',
'type': 'Data Breach'}