HackingOtherDelayed DiscoveryIdentity (basic)Government IDPIIHighContained

Automotive Recovery Services. Inc.

bd_bbaea8979431c03a · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

Jul 7, 2015

To disclose

—

Affected

1,195state residents only

Linked

5 filings

Confidence

66%

Full breach record for Automotive Recovery Services. Inc. →

Automotive Recovery Services, Inc. (d/b/a Vehicle Donation Processing Center) notified individuals that unauthorized access to legacy systems between July 2012 and May 2015 may have exposed personal information including SSNs, driver's license numbers, and names. No evidence of misuse was found. 12 months of identity protection was offered.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Jul 1, 2012

Begins

Jul 7, 2015

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

California State AGbd_1d18cd4f39ef11832015-07-06 · +1dVerified
New Hampshire State AGbd_7c428f9b588f35fe2015-07-06 · +1dVerified
Hawaii State AGbd_867d23aad23b34f52015-07-09 · +2dVerified
Massachusetts State AGbd_f0b056337d7829232015-07-10 · +3dVerified

Name: Automotive Recovery Services. Inc.
norm: automotive recovery

Name: Automotive Recovery Services. Inc.
norm: automotive recovery
Industry: Otherllm

Discovered: —
Breach occurred: Jul 1, 2012 – May 31, 2015
Materiality determined: —
Notification sent: Jul 1, 2015
Affected individuals: 1,195state-resident count only
Data types: Identity (basic)Government IDPII
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Arranged to have AllClear ID protect your identity for 12 months at no cost to you
Refining our security programs and implementing additional security layers
Changes made: Refining our security programs and implementing additional security layers
Source: Quoted from the filing itself, not independently verified.

Compliance flags: SC CRA notice due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

California State AGJul 6 · first

New Hampshire State AGJul 6 · first

South Carolina State AG+1d · this page

Hawaii State AG+3d

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2015/AutomotiveRecoveryServices%2CInc.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 7, 2015
Raw hash: 8ed93ccaf30f68c4bbe389f41ec33758c43483c7eacd9e5ba26f5fd04f3cd669

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityAutomotive Recovery Services. Inc.

Victim entityAutomotive Recovery Services. Inc.

IncidentUnauthorized Access

Stated responseArranged to have AllClear ID protect your identity for 12 months at no cost to you

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov