Advance Auto Parts reported that 2,316,591 people were affected by data taken from its environment on a third-party cloud platform, in one of the intrusions linked to the campaign filed at 24-0602. Reporting describes the affected population as consisting largely of current and former employees and job applicants, with social security numbers and government identification numbers among the fields.
An Applicant Is Not A Customer
Somebody who applied for a job at a parts retailer and was not hired has no ongoing relationship with the company, may not remember applying, and handed over a social security number to be considered.
Recruitment data is collected once, retained indefinitely and almost never inventoried. It sits in the same warehouse as sales analytics because that is where data goes.
An Exact Number Is Worth Noting
The figure is 2,316,591, not "approximately 2.3 million". That precision means the company reconstructed which individuals were in the affected tables rather than estimating from a row count.
Most disclosures in this database do not reach that standard, and the ones that do are usually the ones that took longest to produce.
Compiled from the company’s regulatory notifications and public reporting, listed below. The characterisation of the population as largely employees and applicants is as reported. Corrections: corrections@forensicpost.com.