HackingTransportation & LogisticsTransportationData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

Safe Fleet Holdings LLC

bd_023f8c40d286db5f · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 13, 2024

Filed

Jul 18, 2025

To disclose

15 months

Affected · nationwide

7,4782 in this filing

Linked

7 filings

Confidence

66%

Full breach record for Safe Fleet Holdings LLC →

Safe Fleet Holdings, LLC reported an external system breach (hacking) occurring on or about April 13, 2024. The incident compromised the personal information of 7,478 individuals, including names, SSNs, addresses, and financial account data. Safe Fleet engaged third-party forensic specialists, notified federal law enforcement, and mailed notices to affected individuals on July 18, 2025, offering 12 months of credit monitoring services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Apr 13, 2024 → Filed with AG Jul 18, 2025461d ✗ ME AG >90d15 months discovery → filing

Incident timeline

discovery → filing · 15 months / 461 days

Apr 13, 2024

Begins

Apr 13, 2024

Discovered

Jul 18, 2025

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

New Hampshire State AGbd_1c16d3f8d84068652025-07-18Verified
Massachusetts State AGbd_6a508e353418600d2025-07-18Verified
Nebraska State AGbd_8f12523f6d3a18672025-07-18Verified
Indiana State AGbd_c81ee0fd4128b4f12025-07-18Verified

Show 2 more filings ↓up to 4d gap

Vermont State AGbd_ee9fa615e98557e82025-07-18Verified
Texas State AGbd_9fad9f8bfc1ccc7f2025-07-22 · +4dVerified

Name: Safe Fleet Holdings LLC
norm: safe fleet
Domain: safefleet.net

Name: Safe Fleet Holdings LLC
norm: safe fleet
Domain: safefleet.net
Industry: Transportation & Logisticsllm

Discovered: Apr 13, 2024
Breach occurred: Apr 13, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 18, 2025
Affected individuals: 7,478state + nationwide
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Providing written notice of this event to relevant state regulatorsProviding notice to the three major consumer reporting agencies, Equifax, Experian, and TransUnion
Initial access: exploit_public_facing

During the incident: Launched an investigation with the assistance of third-party cybersecurity specialists
Conducted a comprehensive, programmatic and manual review to identify what information was accessible
Notified federal law enforcement and is cooperating with any investigation
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing access to twelve (12) months of credit monitoring and identity restoration services, through TransUnion
Changes made: Working to implement additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(461 days from discovery to filing)
Compliance flags: ME AG >90d · 461dME resident >180d · 461d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Apr 13, 2024
→ Filed with AG: Jul 18, 2025
461d 90 days ME AG >90d
Maine
Discovered: Apr 13, 2024
→ Notified: Jul 18, 2025
461d 180 days ME resident >180d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Apr 13, 2024 → Filed with AG: Jul 18, 2025	461d	90 days	ME AG >90d
Maine	Discovered: Apr 13, 2024 → Notified: Jul 18, 2025	461d	180 days	ME resident >180d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

New Hampshire State AGJul 18 · first

Massachusetts State AGJul 18 · first

Nebraska State AGJul 18 · first

Indiana State AGJul 18 · first

Vermont State AGJul 18 · first

Maine State AGJul 18 · first · this page

Texas State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b7d82113-b9ab-4e33-94a5-b9b4bdddfed8.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 18, 2025
Raw hash: 675cf4ee8e298152446c62eb91a80ab9ad699bb402808f864cc0b8bedd2a89bd

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entitySafe Fleet Holdings LLC

Victim entitySafe Fleet Holdings LLC

Incidentdiscovered Apr 13, 2024

Stated responseLaunched an investigation with the assistance of third-party cybersecurity specialists

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov