HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Asbury Automotive Group, Inc.
bd_128bda9c925acce5 · schema v1 · pii pii-v1
Full breach record for Asbury Automotive Group, Inc. →Asbury Automotive Group reported a breach occurring on 12/25/2023, discovered on 03/25/2024, affecting 2 Maine residents. The incident involved an external system breach (hacking) resulting in the acquisition of names and driver's license numbers. Asbury provided written notification and one year of credit monitoring services.
Maine clockDiscovered Mar 25, 2024 → Filed with AG Apr 24, 202430d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_1f650bcc4c18cb84Montana State AGfiled 2024-04-24Verified
- bd_2f4692a880bce654New Hampshire State AGfiled 2024-04-24Verified
- bd_4ddce7a31b86d2c5Vermont State AGfiled 2024-04-24Verified
- bd_92252072357742ddIndiana State AGfiled 2024-04-24Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0dae7fdc-1086-4708-9e8c-a07294ed1ada.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 24, 2024
- Raw hash
- 7d9b5f89d084ad00c1694ee58b719cf93517177eb07e0d473d931913357103d2
Reporting entity
- Name
- Asbury Automotive Group, Inc.norm: asbury automotive
Victim entity
- Name
- Asbury Automotive Group, Inc.norm: asbury automotive
Incident
- Discovered
- Mar 25, 2024
- Materiality determined
- —
- Notification sent
- Apr 24, 2024
- Affected individuals
- 2
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with the Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 25, 2024→ Filed with AG: Apr 24, 202430d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.