Almeida Law Group is investigating a data breach at Toyo Tire Holdings of Americas Inc. The breach occurred on January 6th, 2026 – February 4th, 2026 and was discovered on September 22nd, 2026. If you were affected, contact Almeida Law Group.
About Toyo Tire Holdings of Americas Inc.
Toyo Tire Holdings of Americas Inc. (TTHA) is the wholly-owned North American subsidiary of Toyo Tire Corporation of Itami, Japan. Operating as a holding company headquartered in the Costa Mesa and Cypress, California area, TTHA’s group companies manufacture, import, sell, and distribute Toyo and Nitto brand tires across the U.S., Canada, and Mexico. Its subsidiaries include Toyo Tire U.S.A. Corp., Nitto Tire U.S.A. Inc., Toyo Tire Canada Inc., Toyo Tire North America O.E. Sales LLC, and Toyo Tire North America Manufacturing Inc., which operates a tire manufacturing plant in White, Georgia. Because TTHA’s operations span manufacturing, sales, and distribution across multiple countries, the company collects and stores a wide range of personal information about employees, customers, and business contacts.
What Happened?
Toyo Tire Holdings of Americas Inc. was listed in a Texas Attorney General data security breach report (record BR-0005437) for a data security incident that affected 17,707 individuals in total. According to the filing, the breach took place between January 6th, 2026 and February 4th, 2026 and was not discovered until September 22nd, 2026—a gap of approximately eight months. Consumer notifications were sent by U.S. Mail. The compromised information included names, Social Security numbers, driver’s license numbers, financial account or card numbers, medical information, health insurance information, dates of birth, and other unspecified data types.
According to law firm Cole & Van Note, Toyo Tire began notifying affected individuals on March 25th, 2026—a date that predates the September 22nd, 2026 discovery date listed in the Texas AG filing. This may reflect a revised or expanded investigation timeline, or the two dates may relate to different phases of the company’s review. The breach was also reported to the Massachusetts Attorney General in April 2026. Security research firm UpGuard reported on the incident on April 7th, 2026 and noted that no specific threat actor or ransomware group has been publicly named in connection with this event. Separately, parent company Toyo Tire Corporation reduced its full-year operating income forecast, citing in part a “computer system disruption” that affected first-half 2026 earnings, though it has not been confirmed whether that disruption refers to the same incident. Cole & Van Note announced on April 6th, 2026 that it is investigating potential data breach class action claims, though no filed lawsuit has been identified as of October 2026. Additionally, a prior breach involving Toyo Tire Holdings of Americas Inc. was tracked by the Maine Attorney General with activity dated July 26th, 2018, though details of that earlier incident were not disclosed.
Key Facts at a Glance
- Company or Organization: Toyo Tire Holdings of Americas Inc.
- Industry: Tire and rubber manufacturing and distribution
- Location: Costa Mesa, California 92626
- Incident type: Data security breach involving unauthorized access to personal information
- Date of breach: January 6th, 2026 – February 4th, 2026
- Date breach discovered: September 22nd, 2026
- Date of consumer notification: March 25th, 2026 (per Cole & Van Note)
- Total persons affected: 17,707
- Prior breach: Maine Attorney General breach record, activity dated July 26th, 2018
- Litigation status: Class action investigation announced by Cole & Van Note on April 6th, 2026; no filed lawsuit confirmed as of October 2026
- Source: Texas Attorney General – Data Security Breach Report BR-0005437; Cole & Van Note – Toyo Tires Data Breach Investigation; UpGuard – Toyo Tire data breach; Massachusetts AG – Data Breach Notification Letters April 2026
What Should You Do?
If you received a notice from Toyo Tire Holdings of Americas Inc., review it carefully to determine what information was involved and whether identity theft protection services were offered. Because this breach involved Social Security numbers, financial account information, medical information, and health insurance information, you should place a fraud alert or credit freeze with each of the three major credit bureaus—Equifax, Experian, and TransUnion—and monitor your credit reports for unfamiliar accounts or inquiries. You can request free annual credit reports at AnnualCreditReport.com. If you suspect misuse of your information, visit IdentityTheft.gov for step-by-step recovery guidance. Because medical and health insurance information was also exposed, review your Explanation of Benefits statements and medical records for any services you did not receive, and report any discrepancies to your insurer or healthcare provider.
Your Legal Rights
If your personal or health information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
