DisclosureLens
HackingRetail & ConsumerRetailVulnerability ExploitCustomer Data InvolvedIdentity (basic)Financial accountAuthenticationLowContained

L&M Fleet Supply

bd_40e10e7c5ea264be · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 9, 2019

Filed

Apr 23, 2019

To disclose

14 days

Affected

53state residents only

Linked

3 filings

Confidence

66%
Full breach record for L&M Fleet Supply →2 incidents on file

L&M Fleet Supply notified Montana AG of a data security incident involving unauthorized access to customer payment card data (card numbers, expiration dates, CVVs) via its e-commerce portal. The incident occurred between December 5, 2018, and January 21, 2019. The company discovered the breach on April 9, 2019, engaged forensic investigators, contained the issue, and implemented enhanced security safeguards.

Incident timeline

undetected · 125 days
discovery → filing · 14 days

Dec 5, 2018

Begins

Apr 9, 2019

Discovered

Apr 23, 2019

Filed

vs. sector median

6 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Montana State AGApr 23 · first · this page
New Hampshire State AG+13d
Massachusetts State AG+16d

Pattern: first filing Apr 23 (MT), last May 9 (MA) — a 16-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.