HackingStolen CredentialsCustomer Data InvolvedCREDENTIALSPIILowContained
OTR Leasing, LLC
bd_3f25fa5ad22eab8b · schema v1 · pii pii-v1
Full breach record for OTR Leasing, LLC →OTR Leasing, LLC reported a data breach affecting employee email accounts between January 14 and 20, 2020. An unauthorized individual gained access to a limited number of accounts containing personal information. OTR secured the accounts, engaged a cybersecurity firm, and notified affected individuals on June 8, 2020, offering one year of identity monitoring through Kroll. Remediation included password resets and enhanced authentication.
California clockDiscovered Jan 20, 2020 → Notified Jun 8, 2020140d ✗ CA 60-day late27 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_42f6cf0a603f14e9Montana State AGfiled 2020-07-28Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-192478
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 28, 2020
- Raw hash
- 28d9c3b0d7a03b5598a8d582e250f95ed55fda6b0a4c9df51f903735550341e8
Reporting entity
- Name
- OTR Leasing, LLCnorm: otr leasing
Victim entity
- Name
- OTR Leasing, LLCnorm: otr leasing
Incident
- Discovered
- Jan 20, 2020
- Materiality determined
- —
- Notification sent
- Jun 8, 2020
- Affected individuals
- Not disclosed
- Data types
- CREDENTIALSPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 27 weeks(190 days from discovery to filing)
- Compliance flags
- CA 60-day late · 140d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 20, 2020→ Notified: Jun 8, 2020140d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.