HackingTransportation & LogisticsTransportationStolen CredentialsCustomer Data InvolvedData ExfiltratedGovernment IDIdentity (basic)MediumContained

ATSG, Inc

bd_1bf34451981ec194 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 5, 2024

Filed

Feb 25, 2025

To disclose

25 weeks

Affected

4state residents only

Linked

9 filings

Confidence

67%

Full breach record for ATSG, Inc →

ATSG, Inc. notified the New Hampshire AG of unauthorized access to its IT network identified on September 5, 2024. The incident may affect 4 NH residents, exposing personal information including SSNs and passport numbers. ATSG engaged outside cybersecurity professionals and is offering credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d25 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 25 weeks / 173 days

Sep 5, 2024

Discovered

Feb 25, 2025

Filed

This filing is one of 9 about the same incident.View merged incident

A leak claim by bianlian about this victim predates this filing by 172 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitebianlianbd_100fd113149f5bff2024-11-09 · +107dVerified by operator
Leak Sitebianlianbd_8a1c957e302701ab2024-09-06 · +172dVerified by operator

Regulatory filings (6) · sorted by filing gap

Maryland State AGbd_b257a36e6d1771342025-02-25Verified by operator
Massachusetts State AGbd_af9e80106bed91992025-02-22 · +3dVerified by operator
Indiana State AGbd_5b9b58c33c22b70c2025-02-21 · +4dVerified by operator
Massachusetts State AGbd_0e8ceda8da1c00912024-10-05 · +143dVerified by operator

Show 2 more filings ↓up to 172d gap

HHS OCRbd_eb6e86fd349f9e632024-10-04 · +144dCandidate
Pressbianlianbd_c09996ad6c9c2a8e2024-09-06 · +172dCandidate

Name: ATSG, Inc
norm: atsg
Domain: atsg.net

Name: ATSG, Inc
norm: atsg
Domain: atsg.net
Industry: Transportation & Logisticsllm

Discovered: Sep 5, 2024
Materiality determined: —
Notification sent: Feb 21, 2025
Affected individuals: 4state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Consumer Protection Bureau
Initial access: valid_credentials

During the incident: Launched an investigation in consultation with outside cybersecurity professionals
Providing affected residents with written notification
Offering complimentary credit monitoring
Changes made: Continually evaluates and modifies its practices and internal controls to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(173 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

PressSep 6 · first

HHS OCR+28d

Massachusetts State AG+29d

Indiana State AG+168d

Massachusetts State AG+169d

Maryland State AG+172d

New Hampshire State AG+172d · this page

Pattern: first filing Sep 6, last Feb 25 (NH) — a 172-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/atsg-20250225.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 25, 2025
Raw hash: 3765ad8dfe5c310866d1a74fe8119f58462ba95ddde5c3e2d5c699c95c86d264

Linked disclosures

Ransomware claims (2)

Regulatory filings (6) · sorted by filing gap

Reporting entityATSG, Inc

Victim entityATSG, Inc

Incidentdiscovered Sep 5, 2024

Stated responseLaunched an investigation in consultation with outside cybersecurity professionals

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov