HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
D&G Dealer Services, LLC
bd_adacfae77756d28e · schema v1 · pii pii-v1
Full breach record for D&G Dealer Services, LLC →Kentucky Toyz reported a breach affecting D&G Dealer Services, LLC, an external vendor. The breach occurred on 07/03/2022 and was discovered on 07/04/2022. Approximately 15,833 individuals were affected, including 1 Maine resident. Driver's license numbers and names were compromised. Notification was sent on 08/17/2022, offering 12 months of credit monitoring.
Maine clockDiscovered Jul 4, 2022 → Filed with AG Aug 9, 202236d ⏱ ME AG >30d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2e06c6fb673b6c3cMaine State AGfiled 2022-08-09Candidate
- bd_8dbf7bd273cc18d8Maine State AGfiled 2022-08-09Candidate
- bd_a8a8c90686762762Montana State AGfiled 2022-08-09Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c0c88061-16c3-4def-9785-c38954fdf49a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 9, 2022
- Raw hash
- 6c664ded02ff179afb5369005e6d99abf8b3a684743a586635f3d100839fd8c9
Reporting entity
- Name
- Kentucky Toyznorm: kentucky toyz
Victim entity
- Name
- D&G Dealer Services, LLCnorm: d g dealer
Incident
- Discovered
- Jul 4, 2022
- Materiality determined
- —
- Notification sent
- Aug 17, 2022
- Affected individuals
- 15,833
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(36 days from discovery to filing)
- Compliance flags
- ME AG >30d · 36d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 4, 2022→ Filed with AG: Aug 9, 202236d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.