HackingTransportation & LogisticsTransportationStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

OEC Freight Companies Inc.

bd_5e6ba59d6e2238ed · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 14, 2025

To disclose

—

Affected

4state residents only

Linked

5 filings

Confidence

68%

Full breach record for OEC Freight Companies Inc. →

OEC Freight Companies Inc. issued a consumer notification letter regarding a cybersecurity incident involving unauthorized access to personal information. The breach impacted customer data including names, SSNs, and financial account numbers. The company is offering complimentary credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Mar 14, 2025

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Nebraska State AGbd_7ccbb523c686a1c62025-03-14Verified
Maryland State AGbd_85643f4f974a76322025-03-14Verified
Indiana State AGbd_cdc09cf6b2a4eed82025-03-14Verified
Massachusetts State AGbd_d4e7e377afcc178f2025-03-14Verified

Name: OEC Freight Companies Inc.
norm: oec freight companies

Name: OEC Freight Companies Inc.
norm: oec freight companies
Industry: Transportation & Logisticsllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Offering complimentary credit monitoring through IDX identity protection membership
Providing a dedicated toll-free response line staffed with professionals
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Nebraska State AGMar 14 · first

Maryland State AGMar 14 · first

Indiana State AGMar 14 · first

Massachusetts State AGMar 14 · first

Montana State AGMar 14 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/03/Consumer-notification-letter-250.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 14, 2025
Raw hash: 910e10c3a04bc92fcb070111db0b337e97046147c4c382593ad150eb41637acf

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityOEC Freight Companies Inc.

Victim entityOEC Freight Companies Inc.

IncidentUnauthorized Access

Stated responseOffering complimentary credit monitoring through IDX identity protection membership

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov