Social EngineeringTransportation & LogisticsTransportationPhishingStolen CredentialsMulti-Stage ChainCustomer Data InvolvedDelayed DiscoveryIdentity (basic)PIILowContained

Roadrunner Transportation Systems, Inc.

bd_958d867153139f6a · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 2, 2018

Filed

Sep 14, 2018

To disclose

11 weeks

Affected

36state residents only

Linked

6 filings

Confidence

66%

Roadrunner Transportation Systems, Inc. notified the NH AG of a phishing campaign in July 2018. Employees clicked malicious links, leading to unauthorized access to email accounts in April 2018. 36 NH residents affected. RRTS engaged forensic investigators, reset passwords, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 92 days

discovery → filing · 11 weeks / 74 days

Apr 1, 2018

Begins

Jul 2, 2018

Discovered

Sep 14, 2018

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_eb038ada46e9683f2018-09-10 · +4dVerified
Montana State AGbd_eba7372e61b601d62018-09-10 · +4dCandidate
California State AGbd_6ffaaff7a487387b2018-10-09 · +25dVerified
New Hampshire State AGbd_84dca1eb8189732d2018-10-15 · +31dVerified

Show 1 more filing ↓up to 63d gap

New Hampshire State AGbd_c7c39c79567f45702018-07-13 · +63dCandidate

Name: Roadrunner Transportation Systems, Inc.
norm: roadrunner transportation systems

Name: Roadrunner Transportation Systems, Inc.
norm: roadrunner transportation systems
Industry: Transportation & Logisticsllm

Discovered: Jul 2, 2018
Breach occurred: Apr 1, 2018
Undetected for: 92 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 10, 2018
Affected individuals: 36state-resident count only
Data types: Identity (basic)PII
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney Generalproviding written notice of this incident to other state regulators as necessary
Initial access: phishing_link

During the incident: Commenced an investigation into this activity
Working with third party forensic investigators
Changing passwords
Providing all potentially affected individuals complimentary access to twelve (12) free months of credit and identity monitoring services
Providing potentially impacted individuals with guidance on how to better protect against identity theft and fraud
Changes made: Reviewing our existing policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(74 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 4 states

View merged incident ↗

New Hampshire State AGJul 13 · first

Massachusetts State AG+59d

Montana State AG+59d

New Hampshire State AG+63d · this page

California State AG+88d

New Hampshire State AG+94d

Pattern: first filing Jul 13 (NH), last Oct 15 (NH) — a 94-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/roadrunner-transportation-20180914.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 14, 2018
Raw hash: 54ac1dda704348bf4e3f77042e83fa7f39b6223fac0c5a09381f12d6a363b5cc

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityRoadrunner Transportation Systems, Inc.

Victim entityRoadrunner Transportation Systems, Inc.

Incidentdiscovered Jul 2, 2018

Stated responseCommenced an investigation into this activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov