Social EngineeringTransportation & LogisticsTransportationPhishingStolen CredentialsCustomer Data InvolvedMulti-Stage ChainPIIIdentity (basic)LowContained

STUDENT TRANSPORTATION OF AMERICA, INC.

bd_0fa8b4c088a6959b · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 24, 2024

Filed

Aug 8, 2024

To disclose

28 weeks

Affected

1state residents only

Linked

7 filings

Confidence

64%

Full breach record for STUDENT TRANSPORTATION OF AMERICA, INC. →

Student Transportation of America notified individuals of a security incident where unauthorized actors accessed employee email accounts via suspicious activity on January 24, 2024. The investigation determined personal information was potentially impacted. STA engaged forensic specialists, notified law enforcement, enhanced security protocols, and offered 12 months of complimentary credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 28 weeks / 197 days

Jan 24, 2024

Discovered

Aug 8, 2024

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Vermont State AGbd_120ff8acd6aaf4952024-08-08Verified
New Hampshire State AGbd_19e309ad87559e212024-08-08Verified
Indiana State AGbd_1d705831f299146f2024-08-08Verified
California State AGbd_3ad69f7896265a112024-08-08Verified

Show 2 more filings ↓

Massachusetts State AGbd_d8f93da843e377f22024-08-08Verified
Maine State AGbd_e8e795c06a8808902024-08-08Verified

Name: STUDENT TRANSPORTATION OF AMERICA, INC.
norm: student transportation of america
Domain: ridesta.com

Name: STUDENT TRANSPORTATION OF AMERICA, INC.
norm: student transportation of america
Domain: ridesta.com
Industry: Transportation & Logisticsllm

Discovered: Jan 24, 2024
Materiality determined: —
Notification sent: Aug 8, 2024
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: notified law enforcement
Initial access: phishing_link

During the incident: Launched an investigation, with the assistance of third-party forensic specialists
Undertook a comprehensive review of the contents of these email accounts
Notified law enforcement
Enhanced its existing security protocols
Providing you with access to complimentary credit monitoring services at no charge
Providing you with proactive fraud assistance
Changes made: Enhanced its existing security protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(197 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Vermont State AGAug 8 · first

New Hampshire State AGAug 8 · first

Indiana State AGAug 8 · first

California State AGAug 8 · first

Massachusetts State AGAug 8 · first

Maine State AGAug 8 · first

Montana State AGAug 8 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-863.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 8, 2024
Raw hash: 8981803941a318fd1b6982c870968bc96770a9639e708f2c2a39ef4bcb8133ad

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entitySTUDENT TRANSPORTATION OF AMERICA, INC.

Victim entitySTUDENT TRANSPORTATION OF AMERICA, INC.

Incidentdiscovered Jan 24, 2024

Stated responseLaunched an investigation, with the assistance of third-party forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov