HackingTransportation & LogisticsTransportationCustomer Data InvolvedGovernment IDIdentity (basic)MediumContained

SMITH TRANSPORT, LLC

bd_9112c1c513fd9085 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 12, 2022

Filed

Apr 28, 2022

To disclose

11 weeks

Affected

36state residents only

Linked

6 filings

Confidence

67%

Full breach record for SMITH TRANSPORT, LLC →

Smith Transport, Inc. notified the New Hampshire Attorney General of a data security incident discovered on February 12, 2022. The breach impacted the personal information (name, SSN, DOB, driver's license) of 36 New Hampshire residents. Smith Transport engaged forensic experts, notified the FBI, and provided complimentary identity protection services through IDX.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d11 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 11 weeks / 75 days

Feb 12, 2022

Discovered

Apr 28, 2022

Filed

This filing is one of 6 about the same incident.View merged incident

A leak claim by ragnarlocker about this victim predates this filing by 45 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitestormousbd_807d5f99a42595c72022-03-28 · +31dVerified by operator
Leak Siteragnarlockerbd_ea8cd8e10709fed22022-03-14 · +45dVerified by operator

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_58bbd50e990e85392022-04-27 · +1dVerified by operator
Maine State AGbd_a9e33f3cd68b7e982022-04-27 · +1dCandidate
Indiana State AGbd_98163361489f7fc82022-05-17 · +19dVerified by operator

Name: SMITH TRANSPORT, LLC
norm: smith transport

Name: SMITH TRANSPORT, LLC
norm: smith transport
Industry: Transportation & Logisticsllm

Discovered: Feb 12, 2022
Materiality determined: —
Notification sent: Apr 27, 2022
Affected individuals: 36state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified the Federal Bureau of Investigation
Initial access: exploit_public_facing

During the incident: Engaged independent digital forensics and incident response experts
Notified the Federal Bureau of Investigation
Established a toll-free call center through IDX
Provided complimentary identity protection services
Changes made: Implemented additional safeguards to help ensure the security of its systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(75 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGApr 27 · first

Maine State AGApr 27 · first

New Hampshire State AG+1d · this page

Indiana State AG+20d

Pattern: first filing Apr 27 (MA), last May 17 (IN) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/smith-transport-20220428.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 28, 2022
Raw hash: b63910418ad5604b70d8dccca8771bd556fcd0340c297bb4585969b635a9eb0c

Linked disclosures

Ransomware claims (2)

Regulatory filings (3) · sorted by filing gap

Reporting entitySMITH TRANSPORT, LLC

Victim entitySMITH TRANSPORT, LLC

Incidentdiscovered Feb 12, 2022

Stated responseEngaged independent digital forensics and incident response experts

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov