HackingTransportation & LogisticsTransportationData ExfiltratedEmployee Data InvolvedCustomer Data InvolvedIdentity (basic)Government IDEmploymentFinancial accountMediumResolved

Propark Mobility

bd_0ae1809db127a7b6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 18, 2024

Filed

Sep 2, 2024

To disclose

33 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

65%

Full breach record for Propark Mobility →

Propark Mobility experienced a data security incident involving unauthorized access to its IT network between January 15 and January 18, 2024. The company was alerted on January 18, 2024, and promptly blocked access. Investigation determined potential exfiltration of personal information, including names, Social Security numbers, and employment data. The company engaged outside experts, notified law enforcement, and is offering 12 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jan 18, 2024 → Notified Sep 3, 2024229d ✗ CA 60-day late33 weeks discovery → filing

Incident timeline

undetected · 3 days

discovery → filing · 33 weeks / 228 days

Jan 15, 2024

Begins

Jan 18, 2024

Discovered

Sep 2, 2024

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_36fc21b41ac3d7c32024-09-03 · +1dVerified
Maine State AGbd_d09930f8f9c095e82024-09-13 · +11dCandidate
Massachusetts State AGbd_8410d39321b068c72024-09-17 · +15dVerified

Name: Propark Mobility
norm: propark mobility

Name: Propark Mobility
norm: propark mobility
Industry: Transportation & Logisticsllm

Discovered: Jan 18, 2024
Breach occurred: Jan 15, 2024 – Jan 18, 2024
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 3, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDEmploymentFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified law enforcement

During the incident: Blocked the unauthorized access
Engaged outside experts to determine the full scope of the incident
Enhanced the security of our systems
Notified law enforcement
Offering 12 months of free credit monitoring and $1 million in identity theft insurance through Experian IdentityWorks
Changes made: Continuing to take steps to enhance its security measures to help prevent something like this from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 33 weeks(228 days from discovery to filing)
Compliance flags: CA 60-day late · 229d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jan 18, 2024
→ Notified: Sep 3, 2024
229d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jan 18, 2024 → Notified: Sep 3, 2024	229d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

California State AGSep 2 · first · this page

Indiana State AG+1d

Maine State AG+11d

Massachusetts State AG+15d

Pattern: first filing Sep 2 (CA), last Sep 17 (MA) — a 15-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-591116
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 2, 2024
Raw hash: 13732d2792b97aee819583899f8d9f03bf444addbf949b4fe3e8ccb04f42b54c

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityPropark Mobility

Victim entityPropark Mobility

Incidentdiscovered Jan 18, 2024

Stated responseBlocked the unauthorized access

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov