DisclosureLens
HackingRetail & ConsumerRetailCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

United Auto Supply

bd_9db48e20f39d083a · schema v1 · pii pii-v2

Severity

Medium

Discovered

May 25, 2026

Filed

Oct 14, 2026

To disclose

20 weeks

Affected

1state residents only

Linked

3 records

Confidence

70%
Full breach record for United Auto Supply →

United Auto Supply notified the NH Attorney General of unauthorized access to its network between May 22 and May 25, 2026. The company became aware of unusual activity on May 25, 2026. Approximately one New Hampshire resident was affected, with potential exposure of name, Social Security number, driver's license/state ID number, and financial account information. The company engaged third-party specialists, changed network passwords, and is offering credit monitoring.

Leak gap clock⏱ Leak >90d20 weeks discovery → filing

Incident timeline

undetected · 3 days
discovery → filing · 20 weeks / 142 days

May 22, 2026

Begins

May 25, 2026

Discovered

Oct 14, 2026

Filed

vs. sector median

+11 wks slower

This filing is one of 3 records about the same incident.View merged incident
A leak claim by worldleaks about this victim was first seen 131 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
Massachusetts State AGOct 1 · first
New Hampshire State AG+13d · this page

Pattern: first filing Oct 1 (MA), last Oct 14 (NH) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.