HackingRetail & ConsumerRetailStolen CredentialsCapture Stored DataSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedPIIFinancial accountLowActive

Atlantic Automotive Corporation

bd_6e181d65b284e6e6 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jun 10, 2014

To disclose

—

Affected

21state residents only

Linked

2 filings

Confidence

66%

Full breach record for Atlantic Automotive Corporation →

Atlantic Automotive Corp. d/b/a MileOne, Inc. notified the NH AG of a breach involving its third-party vendor TradeMotion. Criminal hackers accessed credit card info for 21 NH residents between March 5 and May 17, 2014. TradeMotion engaged TrustWave and FBI.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 5, 2014

Begins

Jun 10, 2014

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_5c4624ef898cb2a62014-07-15 · +35dVerified

Name: Hudson Cook, LLP
norm: hudson cook

Name: Atlantic Automotive Corporation
norm: atlantic automotive
Also named: Atlantic Automotive Corp.dba oflegal entity
MileOne, Inc.dba oftrade name
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Mar 5, 2014 – May 17, 2014
Materiality determined: —
Notification sent: Jun 16, 2014
Affected individuals: 21state-resident count only
Data types: PIIFinancial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified the FBI
Third party: via TradeMotion
Initial access: exploit_public_facing

During the incident: Removed the software used by the hackers to access this information
Replaced the affected server
Hired TrustWave for third party monitoring and auditing
Monitoring its systems for any ongoing activity
Conducting penetration testing
Contacted the FBI
Changes made: Conducting penetration testing
Monitoring its systems for any additional unauthorized activity
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGJun 10 · first · this page

California State AG+35d

Pattern: first filing Jun 10 (NH), last Jul 15 (CA) — a 35-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/atlantic-automotive-20140610.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 10, 2014
Raw hash: 172812f8043ed8da2d6c9acd188cecb2e1f1444e41d3038e79ae0f86eca46f1b

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityHudson Cook, LLP

Victim entityAtlantic Automotive Corporation

IncidentThird-Party / Supply Chain

Stated responseRemoved the software used by the hackers to access this information

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov