HackingOtherCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Toyotetsu North America

bd_92b8bd2a52392b3a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 7, 2021

Filed

Nov 24, 2021

To disclose

7 weeks

Affected

2state residents only

Linked

4 filings

Confidence

66%

Full breach record for Toyotetsu North America →

Toyotetsu North America notified Montana residents of a data security incident detected on October 7, 2021. Unauthorized access to systems containing names, addresses, dates of birth, and Social Security numbers occurred. The company engaged forensic experts, notified the FBI, and offered one year of complimentary identity protection services through IDX.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 48 days

Oct 7, 2021

Discovered

Nov 24, 2021

Filed

vs. sector median

1 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_1e69870301b2c0de2021-11-24Candidate
Indiana State AGbd_20ba0cd16af772772021-11-24Verified
Massachusetts State AGbd_909292eda1b6c9802021-11-24Verified

Name: Toyotetsu North America
norm: toyotetsu north america

Name: Toyotetsu North America
norm: toyotetsu north america
Industry: Otherllm

Discovered: Oct 7, 2021
Materiality determined: —
Notification sent: Nov 24, 2021
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Engaged digital forensics experts to assist with the investigation
Notified the Federal Bureau of Investigation
Offering complimentary one-year enrollment in IDX identity protection
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(48 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGNov 24 · first

Indiana State AGNov 24 · first

Massachusetts State AGNov 24 · first

Montana State AGNov 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-108.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 24, 2021
Raw hash: 9ecfb1e3c1c28ce979c632090b080e87579d916d5e3b3b44d1c78442bfbee8cb

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityToyotetsu North America

Victim entityToyotetsu North America

Incidentdiscovered Oct 7, 2021

Stated responseEngaged digital forensics experts to assist with the investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov