PhysicalRetail & ConsumerRetailTheftCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDFinancial accountEmploymentMediumContained

Volkswagen of Oakland

bd_5db9a2f94bd60de1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 27, 2015

Filed

Aug 21, 2015

To disclose

25 days

Affected

Not disclosed

Confidence

64%

Full breach record for Volkswagen of Oakland →

Volkswagen of Oakland, a subsidiary of M&M Automotive Group, Inc., experienced a physical break-in and vandalism on July 27, 2015. Thieves stole archived vehicle jackets containing personal information including names, addresses, driver's license numbers, bank account details, and employment information. The company reported the incident to the Oakland Police Department and is offering one year of ID Watchdog Platinum identity protection services to affected customers.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jul 27, 2015 → Notified Aug 20, 201524d ✓ CA 60-day OK25 days discovery → filing

Incident timeline

discovery → filing · 25 days

Jul 27, 2015

Begins

Jul 27, 2015

Discovered

Aug 21, 2015

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: M&M Automotive Group, Inc.
norm: m m automotive group
Domain: myersag.com

Name: Volkswagen of Oakland
norm: volkswagen of oakland
Industry: Retail & Consumerllm

Discovered: Jul 27, 2015
Breach occurred: Jul 27, 2015
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 20, 2015
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountEmployment
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: Reported it to the Oakland Police Department

During the incident: Reported it to the Oakland Police Department
Conducting a thorough review of the potentially affected records
Implemented additional security measures designed to prevent a recurrence of such a breach
Changes made: Offering a complimentary one (1) year membership of the “ID Watchdog Platinum” services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 days(25 days from discovery to filing)
Compliance flags: CA 60-day OK · 24d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jul 27, 2015
→ Notified: Aug 20, 2015
24d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jul 27, 2015 → Notified: Aug 20, 2015	24d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-57502
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 21, 2015
Raw hash: 06fd12e5cbc05ebd16b91e0d2cbe3ff386178910aecd1bb7d7abaae9d3fdfc12

Reporting entityM&M Automotive Group, Inc.

Victim entityVolkswagen of Oakland

Incidentdiscovered Jul 27, 2015

Stated responseReported it to the Oakland Police Department

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov