MalwareTransportation & LogisticsTransportationRansomwareStolen CredentialsData ExfiltratedData EncryptedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

Select Express & Logistics

bd_991749aca0c00051 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 3, 2020

Filed

Aug 11, 2020

To disclose

14 weeks

Affected

4state residents only

Linked

5 filings

Confidence

66%

Full breach record for Select Express & Logistics →

Select Express & Logistics filed a supplemental notice with the New Hampshire AG regarding a data event affecting 4 additional NH residents. The incident involved malware encryption and unauthorized access to employee email accounts (Feb-May 2020), resulting in the acquisition of names, SSNs, and driver's licenses. The company engaged forensic investigators, notified law enforcement, and offered 12 months of identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 86 days

discovery → filing · 14 weeks / 100 days

Feb 7, 2020

Begins

May 3, 2020

Discovered

Aug 11, 2020

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_f67db66d30d834862020-08-04 · +7dCandidate
New Hampshire State AGbd_aa02c42e605be2652020-07-31 · +11dVerified
Massachusetts State AGbd_0a23ca31eb21a98f2020-07-27 · +15dVerified
Indiana State AGbd_57285ba9a232f00b2020-07-27 · +15dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Select Express & Logistics
norm: select express logistics
Industry: Transportation & Logisticsllm

Discovered: May 3, 2020
Breach occurred: Feb 7, 2020 – May 5, 2020
Undetected for: 86 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 4, 2020
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Reporting this event to relevant state regulators
Initial access: valid_credentials

During the incident: Launched an investigation
Working with third-party forensic investigators
Undertook a review of the contents of the email accounts and acquired files
Provided written notice of this incident to these additional individuals
Notified law enforcement of this event
Reporting this event to relevant state regulators
Offering you access to complimentary identity monitoring services for twelve (12) months through Kroll
Changes made: Reviewing existing policies, procedures, and security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(100 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 4 states

View merged incident ↗

Massachusetts State AGJul 27 · first

Indiana State AGJul 27 · first

New Hampshire State AG+4d

Montana State AG+8d

New Hampshire State AG+15d · this page

Pattern: first filing Jul 27 (MA), last Aug 11 (NH) — a 15-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/select-express-logistics-20200811.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 11, 2020
Raw hash: 8f90b00e4c809f1e2bdb44ddaed7a098422a6794af0e95c4618998cadbc647e5

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entitySelect Express & Logistics

Incidentdiscovered May 3, 2020

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov