HackingTransportation & LogisticsTransportationData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)Government IDMediumContained

Valley Truck and Tractor Co.

bd_0ed0ccedfd4a27ff · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 1, 2021

Filed

Oct 20, 2021

To disclose

20 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for Valley Truck and Tractor Co. →2 incidents on file

Valley Truck and Tractor Company experienced a data breach between May 13 and June 17, 2021. The company detected unusual network activity in June 2021 and engaged digital forensics experts. Personal information, including names and potentially Social Security numbers, was acquired. The company notified the FBI and offered one year of identity monitoring services through Kroll to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 19 days

discovery → filing · 20 weeks / 141 days

May 13, 2021

Begins

Jun 1, 2021

Discovered

Oct 20, 2021

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Valley Truck and Tractor Co.
norm: valley truck and tractor

Name: Valley Truck and Tractor Co.
norm: valley truck and tractor
Industry: Transportation & Logisticsllm

Discovered: Jun 1, 2021
Breach occurred: May 13, 2021 – Jun 17, 2021
Undetected for: 19 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Initiated an investigation
Took steps to secure our network
Engaged digital forensics experts to assist with the investigation
Notified the Federal Bureau of Investigation
Providing information about steps you can take to help protect your personal information
Offering identity monitoring services through Kroll
Changes made: Implemented enhanced security measures to help prevent a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(141 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-546681
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 20, 2021
Raw hash: 2fcc5309b3ff268fa8cee4ecd9846358ec78f1e926d13e48ccefc3e27d48cf2d

Reporting entityValley Truck and Tractor Co.

Victim entityValley Truck and Tractor Co.

Incidentdiscovered Jun 1, 2021

Stated responseInitiated an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov