HackingStolen CredentialsData ExfiltratedData PublishedCustomer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Arrow Truck Sales, Inc.
bd_9fa6ee17d658e164 · schema v1 · pii pii-v1
Full breach record for Arrow Truck Sales, Inc. →Arrow Truck Sales, Inc. disclosed a cybersecurity incident where an unauthorized third party gained remote access to its network on or about November 30, 2020. The attacker acquired internal company information, including personal data of affected individuals, and posted it on a publicly accessible website. The company engaged outside cybersecurity experts, contacted law enforcement, and enhanced security protections. Affected individuals were offered two years of complimentary identity monitoring services through Kroll.
California clockDiscovered Nov 30, 2020 → Notified May 30, 2021181d ✗ CA 60-day late13 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_585682e4c3c1c2c8Maine State AGfiled 2021-01-11(46d gap)Verified
- bd_0b21a15a92a0fab4Montana State AGfiled 2021-01-08(49d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-538385
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 26, 2021
- Raw hash
- 7e0083516c1f1c172210816a850b5b6506f76cf86096afab87691f98f5b390f0
Reporting entity
- Name
- Arrow Truck Sales, Inc.norm: arrow truck sales
Victim entity
- Name
- Arrow Truck Sales, Inc.norm: arrow truck sales
Incident
- Discovered
- Nov 30, 2020
- Materiality determined
- —
- Notification sent
- May 30, 2021
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 ChannelT1560 Data from Cloud Storage Object
- Threat actor
- External
- Regulator citations
- Contacted law enforcement
Compliance
- Time to disclose
- 13 weeks(88 days from discovery to filing)
- Compliance flags
- CA 60-day late · 181d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 30, 2020→ Notified: May 30, 2021181d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.