HackingTransportation & LogisticsTransportationStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Safe Fleet Holdings LLC

bd_8f12523f6d3a1867 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Apr 13, 2024

Filed

Jul 18, 2025

To disclose

—

Affected

8state residents only

Linked

7 filings

Confidence

66%

Full breach record for Safe Fleet Holdings LLC →

Safe Fleet Holdings, LLC reported a cybersecurity incident to the Nebraska Attorney General on July 18, 2025. The breach occurred on or about April 13, 2024, when an unauthorized actor gained access to systems. Approximately 8 Nebraska residents were affected. Compromised data included names, addresses, Social Security numbers, driver’s license information, and financial account numbers. Safe Fleet engaged third-party cybersecurity specialists, notified federal law enforcement, and provided 12 months of credit monitoring via TransUnion to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 13, 2024

Begins

Apr 13, 2024

Discovered

Jul 18, 2025

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Maine State AGbd_023f8c40d286db5f2025-07-18Candidate
New Hampshire State AGbd_1c16d3f8d84068652025-07-18Verified
Massachusetts State AGbd_6a508e353418600d2025-07-18Verified
Indiana State AGbd_c81ee0fd4128b4f12025-07-18Verified

Show 2 more filings ↓up to 4d gap

Vermont State AGbd_ee9fa615e98557e82025-07-18Verified
Texas State AGbd_9fad9f8bfc1ccc7f2025-07-22 · +4dVerified

Name: Safe Fleet Holdings LLC
norm: safe fleet

Name: Safe Fleet Holdings LLC
norm: safe fleet
Industry: Transportation & Logisticsllm

Discovered: Apr 13, 2024
Breach occurred: Apr 13, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 18, 2025
Affected individuals: 8state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: providing written notice of this event to relevant state regulatorsproviding written notice... to the three major consumer reporting agencies, Equifax, Experian, and TransUnion
Initial access: valid_credentials

During the incident: Launched an investigation, with the assistance of third-party cybersecurity specialists
Conducted a comprehensive, programmatic and manual review
Notified federal law enforcement and is cooperating with any investigation it may conduct
Working to implement additional safeguards and training to its employees
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing individuals with information on how to place a fraud alert and credit freeze on one’s credit file
Providing access to twelve (12) months of credit monitoring and identity restoration services, through TransUnion
Changes made: Working to implement additional safeguards and training to its employees
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Maine State AGJul 18 · first

New Hampshire State AGJul 18 · first

Massachusetts State AGJul 18 · first

Indiana State AGJul 18 · first

Vermont State AGJul 18 · first

Nebraska State AGJul 18 · first · this page

Texas State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/f12d4f23-8d17-4d0c-a228-824834741154.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 18, 2025
Raw hash: 7df54eeb72a4b3a4a368a0baab928584dfd47652d6af6ff9ccfb0087e6967270

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entitySafe Fleet Holdings LLC

Victim entitySafe Fleet Holdings LLC

Incidentdiscovered Apr 13, 2024

Stated responseLaunched an investigation, with the assistance of third-party cybersecurity specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov