HackingVulnerability ExploitSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_GOVERNMENTMediumResolved
CSX Transportation, Inc.
bd_b2c5b056eae0c4ce · schema v1 · pii pii-v1
Full breach record for CSX Transportation, Inc. →CSX Transportation, Inc. filed a data breach notification after a vulnerability in Accellion, Inc.'s FTA software led to unauthorized access to personal information. The breach occurred on December 25, 2020, was discovered on February 9, 2021, and affected 10 Maine residents. The compromised data included names and Social Security numbers. CSX offered one year of credit monitoring and fraud protection services through TransUnion to the individuals impacted.
Maine clockDiscovered Feb 9, 2021 → Filed with AG Mar 16, 202135d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed10 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/71cea8ff-e533-4a4b-a53f-cef90233f023.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 16, 2021
- Raw hash
- b2b5ff99c05ad1ecbb25f3fed47dc9c4924af1b17d9ca18e0874df5e87e7b34d
Reporting entity
- Name
- CSX Transportation, Inc.norm: csx transportation
Victim entity
- Name
- CSX Transportation, Inc.norm: csx transportation
Incident
- Discovered
- Feb 9, 2021
- Materiality determined
- —
- Notification sent
- Mar 16, 2021
- Affected individuals
- 10
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
Compliance
- Time to disclose
- 5 weeks(35 days from discovery to filing)
- Compliance flags
- ME AG >30d · 35d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 9, 2021→ Filed with AG: Mar 16, 202135d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.