HackingTransportation & LogisticsTransportationCustomer Data InvolvedIdentity (basic)MediumContained

PEGASUS LOGISTICS GROUP, INC.

bd_7c04ff0716aac329 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 30, 2022

Filed

Mar 31, 2023

To disclose

48 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

65%

Full breach record for PEGASUS LOGISTICS GROUP, INC. →

Pegasus Logistics Group notified consumers of a data security incident discovered in late April 2023. An unknown actor gained unauthorized access to the network, potentially obtaining personal information including names and government identifiers. The company engaged forensic investigators, secured the network, and offered complimentary credit and identity monitoring services through IDX to affected individuals. Notification was sent on March 30, 2023.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 48 weeks / 335 days

Apr 30, 2022

Discovered

Mar 31, 2023

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_00228127fc5f4bc02023-03-31Verified
Indiana State AGbd_81f6f9dc85d95fda2023-03-31Verified

Name: PEGASUS LOGISTICS GROUP, INC.
norm: pegasus logistics

Name: PEGASUS LOGISTICS GROUP, INC.
norm: pegasus logistics
Industry: Transportation & Logisticsllm

Discovered: Apr 30, 2022
Materiality determined: —
Notification sent: Mar 30, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Initial access: exploit_public_facing

During the incident: Took steps to secure our network
Launched an investigation with the assistance of a leading independent computer forensics firm
Conducted a comprehensive review of the potentially affected data
Implemented additional safeguards to help ensure the security of our network
Offering you credit and identity monitoring and protection services through IDX
Changes made: Implemented additional safeguards to help ensure the security of our network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 48 weeks(335 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGMar 31 · first

Indiana State AGMar 31 · first

Delaware State AGMar 31 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2023/04/Pegasus-Consumer-Notification-Letter-Adult.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 31, 2023
Raw hash: b3b6a4c630841c5f9d4ac367a660036cf2befa19e6c06969ac578e9f59bb759a

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityPEGASUS LOGISTICS GROUP, INC.

Victim entityPEGASUS LOGISTICS GROUP, INC.

Incidentdiscovered Apr 30, 2022

Stated responseTook steps to secure our network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov