HackingTransportation & LogisticsTransportationStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumActive

Zenith Global Logistics

bd_4e2f5e240206fe91 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 24, 2019

Filed

Dec 19, 2019

To disclose

8 weeks

Affected

2state residents only

Confidence

67%

Full breach record for Zenith Global Logistics →

Zenith Global Logistics notified Montana residents of a data breach discovered on October 24, 2019, involving compromised employee Office 365 accounts. Exposed data included names, SSNs, and potentially bank account numbers, passport numbers, and driver's license numbers. Over 1,500 individuals may be affected. The company engaged forensic investigators and law enforcement, and is offering one year of identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 56 days

Oct 24, 2019

Discovered

Dec 19, 2019

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: Zenith Global Logistics
norm: zenith global logistics

Name: Zenith Global Logistics
norm: zenith global logistics
Industry: Transportation & Logisticsllm

Discovered: Oct 24, 2019
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged cybersecurity consulting firm Elliott Davis to oversee investigation
Engaged law firm Parker Poe
Secured vendors to help close off improper access
Cut off the threat to the infected account
Changes made: Require two-factor authentication for Office 365 accounts
More widespread use of encryption
Increased personnel training on cybersecurity best practices
Secured services of Kroll to provide identity monitoring at no cost for one year
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(56 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/General-Notice-37.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 19, 2019
Raw hash: dd90ede677c432b2a56cbe405f65ae4aae1fa07c45219902a0007510a57d6bd7

Reporting entityZenith Global Logistics

Victim entityZenith Global Logistics

Incidentdiscovered Oct 24, 2019

Stated responseEngaged cybersecurity consulting firm Elliott Davis to oversee investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov