Social EngineeringExtortion DemandPhishingRansom DemandedData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICPHIMediumActive
TOYOTA MOTOR SALES, U.S.A., INC.
bd_85417b84d101de5e · schema v1 · pii pii-v1
Full breach record for TOYOTA MOTOR SALES, U.S.A., INC. →Toyota Motor Sales, U.S.A., Inc. notified the New Hampshire Attorney General of a security breach involving its pharmacy benefits manager, Express Scripts. An extortionist threatened to disclose personal information (names, SSNs, DOBs) of 188 Toyota associates. 23 New Hampshire residents were specifically identified. Toyota notified the FBI, sent notices to affected employees, and engaged Kroll for fraud prevention.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed188 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/toyota-motor-sales-20081121.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 21, 2008
- Raw hash
- ac0556320f126cbdb5dcc31d49b3eb77a12d4a5c0e228271550e7f03cce0dca0
Reporting entity
- Name
- TOYOTA MOTOR SALES, U.S.A., INC.norm: toyota motor sales usa
Victim entity
- Name
- TOYOTA MOTOR SALES, U.S.A., INC.norm: toyota motor sales usa
Incident
- Discovered
- Nov 6, 2008
- Materiality determined
- —
- Notification sent
- Nov 20, 2008
- Affected individuals
- 188
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICPHI
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1486 Data Encrypted for ImpactT1566 Phishing
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General's Office (Consumer Protection Bureau)
- Third party
- via Express Scripts
- Initial access
- supply_chain
Compliance
- Time to disclose
- 15 days(15 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.