AAA (American Automobile Association)

What this pass recorded. Nothing confirmed at national level this pass, and the structure is why: AAA is a federation of independent regional clubs, not a single company, so each club runs its own systems, its own membership database and its own insurance and financial services operations under a shared brand. A member has no way to know which entity actually holds their data, and a breach at one club produces no notification obligation at another. The federated model also means a national search systematically under-detects incidents. Recorded as unverified rather than clean; recommend following up at the club level for the Mid-Atlantic region specifically.

• Severity
• Evidence tierUnassigned
• Claims confirmed
• Last verified2026-08-04

Primary source. None recorded — Unverified - heuristic first draft.

Arbitration

Not independently confirmed this pass — AAA operates as a FEDERATION of regionally independent, separately-incorporated clubs (e.g., AAA Mid-Atlantic serves this specific region) rather than a single centrally-owned company, meaning terms, privacy practices, and any specific incidents likely vary by REGIONAL club rather than following one uniform national policy — similar to the YMCA's federated structure documented elsewhere in this tracker.

Contacts

Privacy contact. Not recorded.

Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.

Mailing address. Not recorded.