HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDPIIMediumContained

D&G Dealer Services, LLC

bd_68502463942864e9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 4, 2022

Filed

Aug 9, 2022

To disclose

5 weeks

Affected

2state residents only

Confidence

66%

D&G Dealer Services, LLC notified individuals of a data incident discovered on July 4, 2022, involving personal information from credit applications for marine or RV purchases. Data included names, addresses, SSNs, DOBs, and emails. The company engaged forensic investigators, notified law enforcement, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 36 days

Jul 4, 2022

Discovered

Aug 9, 2022

Filed

vs. sector median

4 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: D&G Dealer Services, LLC
norm: dg dealer services

Name: D&G Dealer Services, LLC
norm: dg dealer services
Industry: Financial Servicesllm

Discovered: Jul 4, 2022
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDPII
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: notified the FBI and Blue Ash, Ohio police department
Initial access: valid_credentials

During the incident: Promptly took steps to secure our network
Notified the FBI and Blue Ash, Ohio police department
Engaged an expert cybersecurity firm to investigate the incident
Changes made: Offer you a complimentary twelve months online credit monitoring service, myTrueIdentity, provided by TransUnion Interactive
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-483.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 9, 2022
Raw hash: 6c15d0bd39df19b929b3fd04361e45bdebc1ffab0fad343598f1d0bde085a7ad

Reporting entityD&G Dealer Services, LLC

Victim entityD&G Dealer Services, LLC

Incidentdiscovered Jul 4, 2022

Stated responsePromptly took steps to secure our network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov