AccidentalTransportation & LogisticsTransportationMisconfigurationCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

J.B. Hunt Transport, Inc.

bd_59eb7fd25276ddbb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 10, 2021

Filed

Oct 20, 2021

To disclose

6 weeks

Affected

377state residents only

Linked

4 filings

Confidence

66%

Full breach record for J.B. Hunt Transport, Inc. →5 incidents on file

J.B. Hunt Transport, Inc. notified the New Hampshire Attorney General of a cybersecurity incident involving a configuration error in its Microsoft Power Apps portal. Unauthorized access to applicant data occurred between August 17, 2020, and July 2, 2021. The breach exposed names and Social Security numbers of 377 New Hampshire residents. J.B. Hunt offered one year of complimentary credit monitoring and identity restoration services through Experian to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 389 days

discovery → filing · 6 weeks / 40 days

Aug 17, 2020

Begins

Sep 10, 2021

Discovered

Oct 20, 2021

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_90f9ff5e002e9d732021-10-20Candidate
Massachusetts State AGbd_df7c6261f3db4b002021-10-20Verified
Delaware State AGbd_e23585d36fb04fea2021-10-20Verified

Name: J.B. Hunt Transport, Inc.
norm: jb hunt transport

Name: J.B. Hunt Transport, Inc.
norm: jb hunt transport
Industry: Transportation & Logisticsllm

Discovered: Sep 10, 2021
Breach occurred: Aug 17, 2020 – Jul 2, 2021
Undetected for: 389 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 20, 2021
Affected individuals: 377state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Misconfiguration
MITRE ATT&CK: T1530 Data from Cloud Storage Object
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General's Office

During the incident: Completed its investigation into a security incident involving a configuration error in the Microsoft Power Apps portal
Immediately took steps to secure the portal
Completed a careful review of the data
Began mailing notification letters to 377 New Hampshire residents
Offered the New Hampshire residents complimentary one-year subscriptions to credit monitoring, fraud consultation, and identity restoration services through Experian
Established a dedicated, toll-free call center
Changes made: Reviewed permissions to access data in the cloud
Made modifications for all cloud services
Implemented other measures to help prevent unauthorized access to J.B. Hunt data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

California State AGOct 20 · first

Massachusetts State AGOct 20 · first

Delaware State AGOct 20 · first

New Hampshire State AGOct 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/j-b-hunt-transport-20211020.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 20, 2021
Raw hash: 8557e490064fb83534b96210a5aa20cc0edd1f50a67c4309ec77f7dd69b90871

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityJ.B. Hunt Transport, Inc.

Victim entityJ.B. Hunt Transport, Inc.

Incidentdiscovered Sep 10, 2021

Stated responseCompleted its investigation into a security incident involving a configuration error in the Microsoft Power Apps portal

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov