HackingFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Government IDFinancial accountCredentialsMediumContained

National Truck Protection Co Inc

bd_a334428cf428094c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 25, 2025

Filed

Apr 23, 2026

To disclose

—

Affected

1state residents only

Confidence

66%

Full breach record for National Truck Protection Co Inc →2 incidents on file

National Truck Protection Co., Inc. (NTP) reported a security event to the Maryland Attorney General on March 25, 2025. The incident involved unauthorized access to a limited portion of NTP's network between January 20 and January 25, 2025. The breach potentially affected one Maryland resident, exposing personal information including name, date of birth, contact information, Social Security numbers, financial account details, and account credentials. NTP engaged third-party cybersecurity experts and legal counsel, rebuilt servers, reset passwords, and enhanced security controls. Notices were mailed to the affected individual on March 27, 2025, along with complimentary credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 5 days

Jan 20, 2025

Begins

Jan 25, 2025

Discovered

Apr 23, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: National Truck Protection Co Inc
norm: national truck protection
Domain: ntpco.com

Name: National Truck Protection Co Inc
norm: national truck protection
Domain: ntpco.com
Industry: Financial Servicesllm

Discovered: Jan 25, 2025
Breach occurred: Jan 20, 2025 – Jan 25, 2025
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 27, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial accountCredentials
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified Maryland Attorney General
Initial access: exploit_public_facing

During the incident: Engaged outside counsel to assist with assessing our legal obligations
Engaged a leading cybersecurity firm to investigate
Rebuilding all servers
Resetting all passwords
Refining the use of multifactor authentication
Reconfiguring firewall and endpoint-detection settings
Deploying expanded anti-ransomware protection on all servers
Working with a third-party expert to validate the efficacy of those remediation measures
Engaged a data-review firm to assess the contents of potentially impacted files
Providing complimentary credit monitoring to any individual who had a Social Security number potentially impacted
Mailing notices to affected individuals
Changes made: Rebuilding all servers
Resetting all passwords
Refining the use of multifactor authentication
Reconfiguring firewall and endpoint-detection settings
Deploying expanded anti-ransomware protection on all servers
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376754.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 23, 2026
Raw hash: 99e136a024ba525c66586bdefa6b6b071cc0ff2345446691c9453519de9c2d47

Reporting entityNational Truck Protection Co Inc

Victim entityNational Truck Protection Co Inc

Incidentdiscovered Jan 25, 2025

Stated responseEngaged outside counsel to assist with assessing our legal obligations

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov