Where does the Soapy Joes Car Wash case file come from?

Every entry is taken from the breach report Soapy Joes Car Wash lodged with the Indiana Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Soapy Joes Car Wash Data Breach

This file collects the dated facts on record for the Soapy Joes Car Wash incident. The state report is dated December 29, 2025. The incident itself is dated October 6, 2025.

Timeline

84 days separate the incident date from the date it was reported.

October 6, 2025Incident dateWhen the filing says the breach took place.
December 29, 2025Report filed in IndianaDate the notice was lodged with the Indiana Attorney General.

Case facts

Filing state: Indiana
Date reported: December 29, 2025
Incident date: October 6, 2025
Receiving office: Indiana Attorney General

Case notes

An Indiana business, Soapy Joes Car Wash, has filed notification of a data security incident. The company reported this event to regulators on December 29, 2025. Public records indicate the underlying security issue initially occurred on October 6, 2025, involving personal information belonging to individuals.

The specifics of how the breach occurred remain under investigation by Soapy Joes Car Wash, and the filing does not detail the method of compromise. The company has stated that the incident is still being actively investigated to understand its full scope and impact. The precise types of personal information affected by this breach were not specified in the public filing.

Because the exact categories of data involved have not been disclosed, affected individuals should generally be cautious. Personal information broadly refers to any data that can identify an individual, potentially including names, contact details, or other unique identifiers, depending on what the business collects.

Individuals who receive notification from Soapy Joes Car Wash are advised to remain vigilant. It is good practice to monitor your financial and personal accounts for any unusual activity. Be wary of unsolicited communications, such as emails, texts, or calls, that ask for personal details, as these could be phishing attempts.

While the investigation is ongoing, taking proactive steps can help mitigate potential risks. Consider enabling multi-factor authentication on all online accounts where available and changing passwords for important services. Regular review of account statements can help detect any unauthorized transactions stemming from exposed information.

Questions about this case file

Where does the Soapy Joes Car Wash case file come from?: Every entry is taken from the breach report Soapy Joes Car Wash lodged with the Indiana Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Indiana data breaches

Filing source: Indiana Attorney General

Named in the Soapy Joes Car Wash breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Indiana case files