Social EngineeringTransportation & LogisticsTransportationPIIIdentity (basic)LowContained

U.S. Xpress Enterprises, Inc.

bd_c4b0a0680af6504a · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 8, 2019

Filed

Nov 15, 2019

To disclose

14 weeks

Affected

2state residents only

Confidence

67%

Full breach record for U.S. Xpress Enterprises, Inc. →4 incidents on file

U.S. Xpress Enterprises, Inc. notified Montana residents of a phishing incident where an employee clicked a malicious link, granting unauthorized access to email accounts containing personal information. The breach occurred in July 2019 and was discovered on August 8, 2019. USX engaged forensic experts, changed passwords, and offered one year of free credit monitoring and identity theft insurance to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 38 days

discovery → filing · 14 weeks / 99 days

Jul 1, 2019

Begins

Aug 8, 2019

Discovered

Nov 15, 2019

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: U.S. Xpress Enterprises, Inc.
norm: us xpress

Name: U.S. Xpress Enterprises, Inc.
norm: us xpress
Industry: Transportation & Logisticsllm

Discovered: Aug 8, 2019
Breach occurred: Jul 1, 2019
Undetected for: 38 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 15, 2019
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Initial access: phishing_link

During the incident: Changed passwords
Blocked unauthorized access
Engaged outside technical experts to further investigate
Conducted extensive document review (hand reviewing individual emails and attachments)
Offered one (1) year of free credit monitoring and $1 million in identity theft insurance through Experian
Changes made: Taking steps to enhance its security measures to help prevent something like this from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(99 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-32.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 15, 2019
Raw hash: d3bfd6d76d82680efb75c1644b03b207118624d48ae15036caaf964b65e3b65d

Reporting entityU.S. Xpress Enterprises, Inc.

Victim entityU.S. Xpress Enterprises, Inc.

Incidentdiscovered Aug 8, 2019

Stated responseChanged passwords

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov