HackingCustomer Data InvolvedIDENTITY_BASICLowContained
JJF Management
bd_a465ab5d0026ed7d · schema v1 · pii pii-v1
Full breach record for JJF Management →JJF Management dba Fitzgerald Auto Malls notified Vermont consumers of a cybersecurity incident detected on February 4, 2024. Unauthorized access resulted in the exposure of personal information, including names. The company engaged external forensic investigators, secured its network, and offered complimentary credit monitoring services to affected individuals.
Vermont clock✗ VT AG >45 bday15 months discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_3d754a6e7beec51eIndiana State AGfiled 2025-04-25Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-04-25-jjf-management-dba-fitzgerald-auto-malls-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 25, 2025
- Raw hash
- 14219b2065c6af3280e3b720a74184e8529f0a3d7e0163deccc48d01a77f9211
Reporting entity
- Name
- JJF Managementnorm: jjf management
Victim entity
- Name
- JJF Managementnorm: jjf management
Incident
- Discovered
- Feb 4, 2024
- Materiality determined
- Mar 28, 2025
- Notification sent
- Apr 24, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed notice with the Office of the Vermont Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 15 months(446 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.