MalwareRetail & ConsumerRetailRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Jim Koons Automotive Company

bd_38e411481f58eaf4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 5, 2021

Filed

Dec 21, 2021

To disclose

28 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

67%

Full breach record for Jim Koons Automotive Company →

Jim Koons Automotive Company discovered unusual activity on June 5, 2021. An unauthorized actor gained access to network systems and encrypted files. The investigation confirmed access but no evidence of misuse. Affected data includes names, Social Security numbers, and financial account information. Credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 28 weeks / 199 days

Jun 5, 2021

Discovered

Dec 21, 2021

Filed

vs. sector median

+21 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_14b4497a6eadd7532022-01-14 · +24dVerified
Massachusetts State AGbd_1ff696b81e936d652022-01-14 · +24dVerified
Maine State AGbd_5055ef2bc2bd00962022-01-14 · +24dVerified by operator
Delaware State AGbd_7bc63bb86a9d539d2022-01-14 · +24dCandidate

Show 2 more filings ↓up to 28d gap

California State AGbd_9fb27e6516f925d02022-01-14 · +24dVerified
New Hampshire State AGbd_12caf010497c88252022-01-18 · +28dVerified

Name: Jim Koons Automotive Company
norm: jim koons automotive

Name: Jim Koons Automotive Company
norm: jim koons automotive
Industry: Retail & Consumerllm

Discovered: Jun 5, 2021
Materiality determined: —
Notification sent: Feb 1, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: External
Regulator citations: Reported this incident to federal law enforcementNotifying relevant regulators as required

During the incident: Took steps to secure the network
Engaged computer forensic specialists
Conducted an investigation to determine the nature and scope of the event
Reviewed and enhanced existing policies and procedures
Reported this incident to federal law enforcement
Notifying potentially affected individuals and relevant regulators
Offering complimentary access to credit monitoring and identity restoration services
Changes made: Reviewed and enhanced existing policies and procedures to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(199 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Delaware State AGDec 21 · first · this page

Indiana State AG+24d

Massachusetts State AG+24d

Maine State AG+24d

Delaware State AG+24d

California State AG+24d

New Hampshire State AG+28d

Pattern: first filing Dec 21 (DE), last Jan 18 (NH) — a 28-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2022/02/Pages-from-Jim-Koons-Notice-of-Data-Event-DE.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 21, 2021
Raw hash: 5eff24093f79f74948bda81e13d43ea9aa5155118813082a57efd9cc6bc25a26

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityJim Koons Automotive Company

Victim entityJim Koons Automotive Company

Incidentdiscovered Jun 5, 2021

Stated responseTook steps to secure the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov