AAA Driver Training School data breach: student permit and license numbers taken at a software vendor

Why did I get a letter from AAA Driver Training School?

The letter goes to DTS students, whose records were in the vendor's software. The letter says other businesses and AAA clubs may have been affected by the same vendor event. DTS serves only the AAA Northeast territory. The letter does not name the vendor.

What happened?

The vendor cut off the unauthorized access and fixed the affected system. In January 2026 it told DTS which student data was on that system at the time. DTS says the incident was limited to the vendor's system and no other DTS or AAA Northeast information was involved. It reported the incident to federal law enforcement.

Date	What the letter and the Massachusetts record say
Late December 2025	Vendor tells DTS about unauthorized access to its systems
January 2026	Vendor identifies the student data involved
March 5, 2026	Logged in Massachusetts (25,247)
March 6, 2026	Letter date
May 31, 2026	Deadline to enroll in Experian IdentityWorks

What information was involved?

Student name, contact information, date of birth and driver's permit or license number. No payment card information was involved. Massachusetts' record marks only driver's licenses as breached.

What is DTS offering?

Twelve months of Experian IdentityWorks, with enrollment by May 31, 2026.

Item	Detail from the letter
Provider	Experian IdentityWorks
Length	12 months
Enrollment	experianidworks.com/credit, with the activation code on the letter
Deadline	May 31, 2026, 11:59 pm UTC

The school and education breach guide and the guide to letters from companies you never dealt with cover similar notices.

What the documents leave open

• Which driving school software vendor was breached, and which other AAA clubs or businesses were affected.
• How the vendor's systems were accessed.
• The total number of students affected outside Massachusetts.