AccidentalTransportation & LogisticsTransportationMisdeliveryEmployee Data InvolvedIdentity (basic)Government IDMediumContained

Coordinated Transportation Solutions

bd_7764ec3239a78f55 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 21, 2017

Filed

Nov 28, 2017

To disclose

7 days

Affected

3state residents only

Confidence

66%

Full breach record for Coordinated Transportation Solutions →

Coordinated Transportation Solutions notified the NH AG of a data breach on Nov 28, 2017. On Nov 21, 2017, an employee inadvertently emailed PII (names, SSNs) of 3 NH resident employees to an unintended recipient. The company notified the employees and attempted to contact the recipient to delete the emails. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 days

Nov 21, 2017

Begins

Nov 21, 2017

Discovered

Nov 28, 2017

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Name: Coordinated Transportation Solutions
norm: coordinated transportation
Domain: ctstransit.com

Name: Coordinated Transportation Solutions
norm: coordinated transportation
Domain: ctstransit.com
Industry: Transportation & Logisticsllm

Discovered: Nov 21, 2017
Breach occurred: Nov 21, 2017 – Nov 21, 2017
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 22, 2017
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1535 Unused/Unsupported Cloud Storage
Threat actor: Internal
Regulator citations: Notified New Hampshire Office of the Attorney General pursuant to New Hampshire Statutes, Section 359-C:20

During the incident: Human Resources and Compliance Departments were immediately notified
Compliance Department attempted to contact the unintended recipient to determine whether or not they indeed received the emails and to notify them to delete all emails and any attachments
Human Resources Department sent notifications electronically to the three (3) New Hampshire employees informing them of the breach incident
Included in each notice were suggested steps that these employees can take to monitor their personal information
Included contact information and/or appropriate internet links for credit reporting agencies and the Federal Trade Commission
Provided contact information for the individual at our agency who can answer their questions and address any concerns regarding this breach incident
Acting to recall the scanned email from this unintended recipient
Continue to monitor this incident and follow up with the affected three (3) New Hampshire employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 days(7 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/coordinated-transportation-20171128.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 28, 2017
Raw hash: 729ef2c901920ca97fe2c751c92a34e38983002219eef2b4fa6da0a4d54c7cb8

Reporting entityCoordinated Transportation Solutions

Victim entityCoordinated Transportation Solutions

Incidentdiscovered Nov 21, 2017

Stated responseHuman Resources and Compliance Departments were immediately notified

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov