HackingTransportation & LogisticsTransportationData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)LowResolved

McLeod Express, LLC

bd_85a18e72727801ce · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 25, 2023

To disclose

—

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for McLeod Express, LLC →

McLeod Express, LLC notified the NH Attorney General of a cybersecurity incident involving unauthorized access to its network between August 2 and August 6, 2023. An unauthorized party acquired certain files. Investigation determined that information for one New Hampshire resident was involved. The company secured systems, engaged external cybersecurity assistance, and notified law enforcement. Notifications were sent on October 25, 2023, and credit monitoring services were offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 2, 2023

Begins

Oct 25, 2023

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_4044bb1ba48389252023-10-25Verified
Indiana State AGbd_8f6c4b5d5ef9a96b2023-10-25Verified
Maine State AGbd_ae33ede2d9e3eed32023-10-25Candidate

Name: McLeod Express, LLC
norm: mcleod express

Name: McLeod Express, LLC
norm: mcleod express
Industry: Transportation & Logisticsllm

Discovered: —
Breach occurred: Aug 2, 2023 – Aug 6, 2023
Materiality determined: —
Notification sent: Oct 25, 2023
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified Attorney General John Formella, Office of the Attorney General, New Hampshire

During the incident: Secured the systems involved
Commenced an investigation with assistance from an external cybersecurity firm
Notified law enforcement
Changes made: Take steps to enhance the security of its computer systems and the data McLeod maintains
Offering complimentary credit monitoring, fraud consultation, and identity theft restoration services through IDX
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGOct 25 · first

Indiana State AGOct 25 · first

Maine State AGOct 25 · first

New Hampshire State AGOct 25 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/mcleod-express-20231025.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 25, 2023
Raw hash: 366eb3582d4a4948662b8d35cd192d1a49c0954a11a210fda4b4edb88e454078

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMcLeod Express, LLC

Victim entityMcLeod Express, LLC

IncidentUnauthorized Access

Stated responseSecured the systems involved

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov