Advance Auto Parts confirms data breach exposed employee information

Advance Auto Parts disclosed unauthorized activity in a third‑party cloud database that led to theft of employee (including SSNs and emails) and some customer data; a threat actor advertised the stolen data for sale on a hacking forum, the company notified law enforcement, will provide breach notifications and identity monitoring as needed, and has incurred about $3M in remediation costs.