HackingTransportation & LogisticsTransportationData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountFinancial credentialsMediumContained

JP Noonan Transportation Inc.

bd_b454d005e1932175 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 11, 2021

Filed

Oct 19, 2021

To disclose

23 weeks

Affected

806state residents only

Linked

6 filings

Confidence

64%

Full breach record for JP Noonan Transportation Inc. →2 incidents on file

JP Noonan Transportation, Inc. reported a cyber-attack where an unauthorized actor copied personal information from its systems. The incident was first detected on May 11, 2021, with a second instance on June 3, 2021. The attack likely occurred in May 2021. Affected data includes names, Social Security numbers, driver's license numbers, credit card numbers, security codes, and bank account/routing numbers. This supplemental notice updates the count of affected New Hampshire residents to 806 (77 initially, plus 729 additional). The company engaged forensic specialists, secured systems, and is offering 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 10 days

discovery → filing · 23 weeks / 161 days

May 1, 2021

Begins

May 11, 2021

Discovered

Oct 19, 2021

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_0b0ed264d76b6fb12021-10-15 · +4dCandidate
Indiana State AGbd_2b49f6cdd60c105d2021-10-15 · +4dVerified
Maine State AGbd_5aebb4c2c6be227e2021-10-15 · +4dVerified by operator
Maine State AGbd_b3cb8561752b5cc82021-10-15 · +4dVerified

Show 1 more filing ↓up to 22d gap

Maine State AGbd_61d94f6952a14cc82021-11-10 · +22dVerified by operator

Name: JP Noonan Transportation Inc.
norm: jp noonan transportation
Domain: jpnoonan.com

Name: JP Noonan Transportation Inc.
norm: jp noonan transportation
Domain: jpnoonan.com
Industry: Transportation & Logisticsllm

Discovered: May 11, 2021
Breach occurred: May 1, 2021 – May 31, 2021
Undetected for: 10 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 15, 2021
Affected individuals: 806state-resident count only
Data types: Identity (basic)Government IDFinancial accountFinancial credentials
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified the Federal Bureau of InvestigationNotified other relevant state regulators

During the incident: Restored systems immediately after initial detection
Secured network upon second detection of suspicious activity
Engaged third-party forensic specialists to confirm full nature and scope
Implemented further technical safeguards
Provided impacted individuals with guidance on how to protect against identity theft and fraud
Provided impacted individuals with complimentary access to twenty-four (24) months of credit monitoring
Notified other relevant state regulators
Notified the Federal Bureau of Investigation
Changes made: Implemented further technical safeguards
Implementing additional training and education to employees regarding cyber threats
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 weeks(161 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 4 states

View merged incident ↗

Montana State AGOct 15 · first

Indiana State AGOct 15 · first

Maine State AGOct 15 · first

New Hampshire State AG+4d · this page

Maine State AG+26d

Pattern: first filing Oct 15 (MT), last Nov 10 (ME) — a 26-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/jp-noonan-transportation-20211019.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 19, 2021
Raw hash: 6fd1bdf7ab2f0aaff845ada61d3e1864576988df969484b1fc3bacc1ef2dbff4

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityJP Noonan Transportation Inc.

Victim entityJP Noonan Transportation Inc.

Incidentdiscovered May 11, 2021

Stated responseRestored systems immediately after initial detection

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov