MalwareRetail & ConsumerRetailRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)Financial accountCredentialsMediumContained

Myers Auto Group, LLC

bd_07e093c1b3f600b4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 11, 2025

Filed

Sep 8, 2025

To disclose

17 weeks

Affected

1state residents only

Linked

4 filings

Confidence

65%

Full breach record for Myers Auto Group, LLC →

Myers Auto Group notified the New Hampshire Attorney General of a ransomware event affecting one New Hampshire resident. Unauthorized activity occurred between May 14 and May 11, 2025, with detection on May 11, 2025. The incident exposed names, contact info, government IDs (SSN/Driver's License), financial account numbers, limited medical info, and login credentials. Notification was sent on September 10, 2025, including credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

May 14, 2025

Begins

Sep 8, 2025

Filed

vs. sector median

+10 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_5f24367451d93f5d2025-09-10 · +2dVerified
Maine State AGbd_8214ae6df5653b032025-09-05 · +3dCandidate
Massachusetts State AGbd_e5916fba530fdd542025-09-12 · +4dVerified

Name: Myers Auto Group, LLC
norm: myers auto
Domain: myersag.com

Name: Myers Auto Group, LLC
norm: myers auto
Domain: myersag.com
Industry: Retail & Consumerllm

Discovered: May 11, 2025
Breach occurred: May 14, 2025
Materiality determined: —
Notification sent: Sep 10, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial accountCredentials
Data elements: Social Security numberDate of birthMedical information
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Office of the Attorney General

During the incident: Engaged outside counsel
Notified law enforcement
Retained cybersecurity experts to conduct a privileged forensic investigation
Restored files from backups
Provided enhanced trainings
Updated policies
Deployed an EDR on all endpoints and servers
Enhanced email security
Conducted vulnerability testing
Changes made: Enhanced security through measures such as providing enhanced trainings, updating policies, deploying an EDR on all endpoints and servers, enhancing email security, and conducting vulnerability testing
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(120 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGSep 5 · first

New Hampshire State AG+3d · this page

Indiana State AG+5d

Massachusetts State AG+7d

Pattern: first filing Sep 5 (ME), last Sep 12 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/myers-auto-20250908.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 8, 2025
Raw hash: 4b0ac470bce7d2483b5c9ae4bb6446ad4ee9c1be450c4f6e1efe915b64059634

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMyers Auto Group, LLC

Victim entityMyers Auto Group, LLC

Incidentdiscovered May 11, 2025

Stated responseEngaged outside counsel

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov