HackingTechnologyRetail & ConsumerInformationVulnerability ExploitCapture Stored DataZero-DayData ExfiltratedCustomer Data InvolvedAuthenticationCredentialsIdentity (basic)MediumActive

Motor Trend Group LLC

bd_6c6289d25fe6d8c4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 19, 2021

Filed

Jul 30, 2021

To disclose

6 weeks

Affected

1,600state residents only

Linked

5 filings

Confidence

70%

Full breach record for Motor Trend Group LLC →2 incidents on file

Motor Trend Group LLC reported a security incident involving the unauthorized access of backup servers for the defunct Streetfire.net site. An unknown actor exploited a previously unknown vulnerability to exfiltrate user data including usernames, emails, passwords, and PII. The incident was discovered on June 19, 2021, affecting over 500 Washington residents. Forensic firms were engaged, and affected users were offered one year of identity monitoring.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d6 weeks discovery → filing

Incident timeline

discovery → filing · 6 weeks / 41 days

Jun 19, 2021

Begins

Jun 19, 2021

Discovered

Jul 30, 2021

Filed

vs. sector median

13 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_1c2497c8a65a72cc2021-07-30Candidate
Delaware State AGbd_f0ccae931295dc802021-07-30Verified
California State AGbd_60b439124c0ab4952021-07-29 · +1dVerified
Oregon State AGbd_0294cc81f2ac0f062021-08-02 · +3dVerified

Name: Motor Trend Group LLC
norm: motor trend
Domain: motortrend.com

Name: Motor Trend Group LLC
norm: motor trend
Domain: motortrend.com
Industry: TechnologyllmRetail & Consumerllm

Discovered: Jun 19, 2021
Breach occurred: Jun 19, 2021 – Jun 20, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1,600state-resident count only
Data types: CredentialsIdentity (basic)
Data elements: NameDate of birthUsername + password
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoing
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 ChannelT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Washington Attorney General
Initial access: exploit_public_facing

During the incident: Leading cyber security forensic firms are assisting with the investigation
Working with external cybersecurity experts to investigate this incident
Advising users to change their passwords on websites where they use the same password
Offering you the option to enroll in one year of identity monitoring services from Identity Theft Guard Solutions (IDX)
Changes made: Assess the need for additional security measures
Continue to monitor its systems for unauthorized activity
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(41 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

California State AGJul 29 · first

Maine State AG+1d

Delaware State AG+1d

Washington State AG+1d · this page

Oregon State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10806.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 30, 2021
Raw hash: bf4150936676154610cbe10085dbe9d1ed3de6da5a8cb42ddaae2a72ecff141e

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityMotor Trend Group LLC

Victim entityMotor Trend Group LLC

Incidentdiscovered Jun 19, 2021

Stated responseLeading cyber security forensic firms are assisting with the investigation

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com