AccidentalTransportation & LogisticsTransportationMisconfigurationCustomer Data InvolvedIdentity (basic)Government IDHighResolved

J.B. Hunt Transport, Inc.

bd_ba962168d53d59c0 · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 10, 2021

Filed

Oct 20, 2021

To disclose

6 weeks

Affected

4,061state residents only

Linked

10 filings

Confidence

64%

Full breach record for J.B. Hunt Transport, Inc. →2 incidents on file

J.B. Hunt Transport, Inc. disclosed a security incident involving a Microsoft Power Apps portal configuration error. Unauthorized access to applicant data, including names and Social Security numbers, occurred between August 17, 2020, and July 2, 2021. The company discovered the incident and confirmed data exposure on September 10, 2021. Affected individuals were offered one year of Experian IdentityWorks. Remediation included cloud permission reviews and service modifications.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due6 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 389 days

discovery → filing · 6 weeks / 40 days

Aug 17, 2020

Begins

Sep 10, 2021

Discovered

Oct 20, 2021

Filed

This filing is one of 10 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

New Hampshire State AGbd_59eb7fd25276ddbb2021-10-20Verified by operator
Maine State AGbd_5d821d50bd9e30cc2021-10-20Candidate
Montana State AGbd_64d097f3d0e2e9512021-10-20Verified by operator
California State AGbd_90f9ff5e002e9d732021-10-20Verified by operator

Show 5 more filings ↓up to 5d gap

Oregon State AGbd_a9556718012425c52021-10-20Candidate
Massachusetts State AGbd_df7c6261f3db4b002021-10-20Verified by operator
Delaware State AGbd_e23585d36fb04fea2021-10-20Verified by operator
Washington State AGbd_e8cf955b53ab548e2021-10-20Verified
Indiana State AGbd_d3f9c7caec2128ae2021-10-15 · +5dVerified by operator

Name: J.B. Hunt Transport, Inc.
norm: jb hunt transport

Name: J.B. Hunt Transport, Inc.
norm: jb hunt transport
Industry: Transportation & Logisticsllm

Discovered: Sep 10, 2021
Breach occurred: Aug 17, 2020 – Jul 2, 2021
Undetected for: 389 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 21, 2021
Affected individuals: 4,061state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Misconfiguration
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Offering you a complimentary one-year membership to Experian's® IdentityWorks®TM
Reviewed permissions to access data in the cloud
Made modifications for all cloud services
Changes made: Reviewed permissions to access data in the cloud
Made modifications for all cloud services
Implemented other measures to help prevent unauthorized access to our data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Indiana State AGOct 15 · first

New Hampshire State AG+5d

Maine State AG+5d

Montana State AG+5d

California State AG+5d

Oregon State AG+5d

Massachusetts State AG+5d

Delaware State AG+5d

Washington State AG+5d

South Carolina State AG+5d · this page

Pattern: first filing Oct 15 (IN), last Oct 20 (SC) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2021/JBHuntTransport.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 20, 2021
Raw hash: 078f14b12df7b3266784b45101dc8dcb99c9c35ac90b8f597623f641cded0b31

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityJ.B. Hunt Transport, Inc.

Victim entityJ.B. Hunt Transport, Inc.

Incidentdiscovered Sep 10, 2021

Stated responseOffering you a complimentary one-year membership to Experian's® IdentityWorks®TM

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov