HackingManufacturingFinancial accountHealth (basic)Identity (basic)Government IDPCIPIIMediumContained

YOROZU

bd_883557e62d386ebe · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 2, 2026

To disclose

—

Affected

8state residents only

Linked

6 records

Confidence

63%

Full breach record for YOROZU →

Yorozu Automotive Tennessee, Inc. notified Massachusetts residents of potential unauthorized access to personal information, including names, SSNs, and dates of birth. No evidence of misuse was found. The company offered 24 months of identity protection services through IDX.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline — partial

? — ?

Breach window unknown

Jun 2, 2026

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 6 records about the same incident.View merged incident

A leak claim by ransomhub about this victim was first seen 589 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteransomhubbd_33027c5bd4a51e442024-10-14 · +596dCandidate

Regulatory filings (4) · sorted by filing gap

Vermont State AGbd_2f88e0772bafc8252026-06-02Verified by operator
New Hampshire State AGbd_538b3c47b3fc502e2026-06-02Verified by operator
Indiana State AGbd_5cd94a0e340da2a62026-06-02Verified by operator
Nebraska State AGbd_6ea333fd415eefdd2026-06-02Verified by operator

Name: YOROZU
norm: yorozu
Domain: yorozu-corp.co.jp

Name: YOROZU
norm: yorozu
Domain: yorozu-corp.co.jp

Discovered: —
Materiality determined: —
Notification sent: Jun 2, 2026
Affected individuals: 8state-resident count only
Data types: Financial accountHealth (basic)Identity (basic)Government IDPCIPII
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Offering 24 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed id theft recovery services through IDX
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Vermont State AGJun 2 · first

New Hampshire State AGJun 2 · first

Indiana State AGJun 2 · first

Nebraska State AGJun 2 · first

Massachusetts State AGJun 2 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-897-yorozu-automotive-tennessee-inc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 2, 2026
Raw hash: 2079e3db0412e5d6fc72c0da084de1cac6e648c4292af333adc58e56b52ca57b

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityYOROZU

Victim entityYOROZU

IncidentUnknown

Stated responseOffering 24 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed id theft recovery services through IDX

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov