HackingCustomer Data InvolvedIDENTITY_BASICLowContained
Tuttle-Click Automotive Group
bd_a02f44ca35536262 · schema v1 · pii pii-v1
Full breach record for Tuttle-Click Automotive Group →Tuttle-Click Automotive Group, a commercial entity, reported an external system breach (hacking) that occurred from November 24, 2023, to December 5, 2023. The breach was discovered on July 29, 2024, and affected 6,012 individuals in total, including one resident of Maine. The company began notifying affected individuals in writing on September 19, 2024, and is offering 24 months of credit monitoring, identity restoration services, and identity theft insurance through IDX.
Maine clockDiscovered Jul 29, 2024 → Filed with AG Sep 19, 202452d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_1ed407818229b8a3California State AGfiled 2024-09-19Candidate
- bd_2cce3717c9e0beb4Indiana State AGfiled 2024-09-19Verified
- bd_7ab0b90e83a61820New Hampshire State AGfiled 2024-09-19Verified
- bd_d6c366e55cd3f63aMontana State AGfiled 2024-09-19Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e67550f1-9a1e-4b4a-9c88-35027cdaca28.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 19, 2024
- Raw hash
- fcd084226e4ac4cef52b359efa2fb1b28add07b5ce452e977bab0e92d4c1803c
Reporting entity
- Name
- Tuttle-Click Automotive Groupnorm: tuttle click automotive
Victim entity
- Name
- Tuttle-Click Automotive Groupnorm: tuttle click automotive
Incident
- Discovered
- Jul 29, 2024
- Materiality determined
- —
- Notification sent
- Sep 19, 2024
- Affected individuals
- 1
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 7 weeks(52 days from discovery to filing)
- Compliance flags
- ME AG >30d · 52d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 29, 2024→ Filed with AG: Sep 19, 202452d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.