Yorozu Automotive Tennessee Discloses Major Data Breach Affecting Over 20,000 Individuals
Yorozu Automotive Tennessee Inc., a U.S. subsidiary of Japan-based Yorozu Corporation, reported a significant data breach that compromised the personal and sensitive information of 20,627 individuals across the United States. The breach, which occurred on October 9, 2024, exposed a wide range of data, including:
- Personally Identifiable Information (PII): Full names, home addresses, dates of birth, Social Security numbers, driver’s license numbers, government-issued IDs, and financial details such as credit/debit card numbers and account access codes.
- Employment-Related Data: W-2 tax forms and pay stubs.
- Protected Health Information (PHI): Medical and health records.
Notifications to affected individuals began on June 2, 2026, nearly two years after the incident. The breach impacted residents in multiple states, with 22 in Indiana, eight in Massachusetts, and one in Vermont among those affected.
In response, Yorozu Automotive Tennessee is offering 24 months of free identity theft protection through IDX, including credit monitoring, CyberScan monitoring, a $1 million insurance reimbursement policy, and fully managed identity recovery services. Affected individuals must enroll by September 2, 2026, using a unique code provided in their notification letters. The company has also set up a dedicated assistance line for breach-related inquiries, available weekdays from 9 a.m. to 9 p.m. Eastern Time.
Source: https://www.claimdepot.com/data-breach/yorozu-2026
Yorozu Automotive of TN and AL cybersecurity rating report: https://www.rankiteo.com/company/yorozu-automotive-us
"id": "YOR1783003024",
"linkid": "yorozu-automotive-us",
"type": "Breach",
"date": "10/2024",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': '20627',
'industry': 'Automotive',
'location': 'Tennessee, USA',
'name': 'Yorozu Automotive Tennessee Inc.',
'type': 'Subsidiary'}],
'customer_advisories': '24 months of free identity theft protection through '
'IDX, including credit monitoring, CyberScan '
'monitoring, a $1 million insurance reimbursement '
'policy, and fully managed identity recovery services. '
'Enrollment deadline: September 2, 2026.',
'data_breach': {'file_types_exposed': ['W-2 tax forms',
'Pay stubs',
'Medical and health records'],
'number_of_records_exposed': '20627',
'personally_identifiable_information': ['Full names',
'Home addresses',
'Dates of birth',
'Social Security '
'numbers',
'Driver’s license '
'numbers',
'Government-issued '
'IDs',
'Credit/debit card '
'numbers',
'Account access '
'codes'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Employment-Related Data',
'Protected Health Information '
'(PHI)']},
'date_detected': '2024-10-09',
'date_publicly_disclosed': '2026-06-02',
'description': 'Yorozu Automotive Tennessee Inc., a U.S. subsidiary of '
'Japan-based Yorozu Corporation, reported a significant data '
'breach that compromised the personal and sensitive '
'information of 20,627 individuals across the United States. '
'The breach exposed personally identifiable information, '
'employment-related data, and protected health information.',
'impact': {'data_compromised': 'Personally Identifiable Information (PII), '
'Employment-Related Data, Protected Health '
'Information (PHI)',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'references': [{'source': 'Yorozu Automotive Tennessee Inc. breach '
'notification'}],
'response': {'communication_strategy': 'Notification letters to affected '
'individuals, dedicated assistance '
'line',
'third_party_assistance': 'IDX (identity theft protection '
'services)'},
'title': 'Yorozu Automotive Tennessee Discloses Major Data Breach Affecting '
'Over 20,000 Individuals',
'type': 'Data Breach'}