HackingTransportation & LogisticsTransportationStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

LANDSTAR SYSTEM, INC.

bd_2ab674753f4a9822 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 30, 2026

Filed

Jun 11, 2026

To disclose

6 weeks

Affected

8state residents only

Linked

6 filings

Confidence

66%

Full breach record for LANDSTAR SYSTEM, INC. →2 incidents on file

Landstar System Holdings, Inc. notified the New Hampshire Attorney General on June 11, 2026, of a data event affecting 8 New Hampshire residents. Unauthorized access occurred between April 29 and April 30, 2026, involving suspicious activity by an unauthorized user in a business application. Impacted data included names, Social Security numbers, and driver's license numbers. Landstar blocked access, engaged forensic experts, notified law enforcement, and provided 12 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 6 weeks / 42 days

Apr 29, 2026

Begins

Apr 30, 2026

Discovered

Jun 11, 2026

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_594465556924da9d2026-06-11Verified
Vermont State AGbd_808662ed62af1abb2026-06-11Verified
Indiana State AGbd_b32e1f41e481e9462026-06-11Verified
Maine State AGbd_ecbaa0d72db8ba882026-06-11Candidate

Show 1 more filing ↓up to 7d gap

Texas State AGbd_6a1bd42d7cb9838d2026-06-18 · +7dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: LANDSTAR SYSTEM, INC.
norm: landstar system
Industry: Transportation & Logisticsllm

Discovered: Apr 30, 2026
Breach occurred: Apr 29, 2026 – Apr 30, 2026
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jun 11, 2026
Affected individuals: 8state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Regulator citations: reported the incident to law enforcementLandstar notified federal law enforcement regarding the event and is cooperating with their investigationLandstar is providing written notice of this incident to relevant state regulators, as necessary and as required by law, and to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Initial access: valid_credentials

During the incident: Promptly blocked the unauthorized access
Reported the incident to law enforcement
Initiated an investigation to determine the nature and scope of the activity
With the help of outside data security experts, Landstar determined that between April 29, 2026, and April 30, 2026, an unauthorized actor accessed certain applications and storage locations within a limited scope of Landstar’s environment and may have accessed or acquired some data from those systems
Landstar conducted a thorough review of the data to determine if it contained information related to individuals
Landstar notified federal law enforcement regarding the event and is cooperating with their investigation
Landstar is working to implement additional safeguards, including additional cybersecurity training to its employees
Landstar implemented additional security measures, including enhanced authentication protocols
Landstar is providing access to credit monitoring services for twelve (12) months, through TransUnion, to affected individuals whose personal information was potentially affected by this incident, at no cost to these individuals
Changes made: Working to implement additional safeguards, including additional cybersecurity training to its employees
Implemented additional security measures, including enhanced authentication protocols
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Massachusetts State AGJun 11 · first

Vermont State AGJun 11 · first

Indiana State AGJun 11 · first

Maine State AGJun 11 · first

New Hampshire State AGJun 11 · first · this page

Texas State AG+7d

Pattern: first filing Jun 11 (MA), last Jun 18 (TX) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/landstar-system-holdings-20260611.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 11, 2026
Raw hash: e41065066a06f3e2e8a4b3a9b552915d02781402f55d9ee2d7a84b4ccc537d56

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityLANDSTAR SYSTEM, INC.

Incidentdiscovered Apr 30, 2026

Stated responsePromptly blocked the unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov