HackingTransportation & LogisticsTransportationData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

May Trucking Company

bd_2b8ac52387f6be3c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 21, 2026

Filed

Aug 13, 2026

To disclose

8 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

64%

Full breach record for May Trucking Company →

May Trucking Company detected suspicious network activity on June 21, 2026, leading to the unauthorized acquisition of files containing names and Social Security numbers. The company engaged cybersecurity specialists, notified the FBI, and offered identity protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d8 weeks discovery → filing

Incident timeline

discovery → filing · 8 weeks / 53 days

Jun 21, 2026

Begins

Jun 21, 2026

Discovered

Aug 13, 2026

Filed

This filing is one of 3 about the same incident.View merged incident

A leak claim by embargo about this victim predates this filing by 44 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteembargobd_ba5add8003d509812026-06-30 · +44dVerified

Regulatory filings (1) · sorted by filing gap

Oregon State AGbd_5bb49227c7fd3a852026-08-13Verified

Name: May Trucking Company
norm: may trucking
Domain: maytrucking.com

Name: May Trucking Company
norm: may trucking
Domain: maytrucking.com
Industry: Transportation & Logisticsllm

Discovered: Jun 21, 2026
Breach occurred: Jun 21, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 13, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Detected suspicious activity within our network and immediately initiated an investigation
Engaged independent cybersecurity specialists to assist with the process
Notified the Federal Bureau of Investigation
Offering complimentary identity protection services through IDX
Changes made: Implemented measures to minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(53 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Oregon State AGAug 13 · first

California State AGAug 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-628218
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 13, 2026
Raw hash: 93dd70922d7a43eabb5118739033ae25a72c22187272cb8fb91d1f778c55c0ae

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityMay Trucking Company

Victim entityMay Trucking Company

Incidentdiscovered Jun 21, 2026

Stated responseDetected suspicious activity within our network and immediately initiated an investigation

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov