CB Squared Services, a Virginia-based company operating Jiffy Lube service centers, experienced a data breach that involved unauthorized access to its network between May 1, 2026, and May 7, 2026. During this incident, an unauthorized party obtained copies of certain files. On June 25, 2026, the company determined that these files contained sensitive personal information. The exposed information explicitly confirmed includes names and Social Security numbers. Additional data types that may have been involved, as reported, include dates of birth, addresses, government IDs, medical information, and financial information. The total number of affected individuals has not been publicly disclosed. CB Squared Services mailed notification letters to affected individuals on July 7, 2026. The New Hampshire Attorney General was also notified on this date. Details regarding the exact scope of potentially exposed medical and financial data beyond names and Social Security numbers remain unclear.