HackingOtherStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Roush Fenway Keselowski Racing

bd_cc925bd95bd57b8e · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 14, 2025

Filed

Sep 12, 2025

To disclose

17 weeks

Affected

6state residents only

Linked

9 filings

Confidence

66%

Full breach record for Roush Fenway Keselowski Racing →

RFK Racing notified Montana residents of a security incident discovered on May 14, 2025, involving unauthorized access to files containing names and government IDs. The company engaged forensic specialists, reviewed data scope, and is offering 24 months of credit monitoring. Approximately 2 Rhode Island residents were also identified as impacted.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 17 weeks / 121 days

May 14, 2025

Discovered

Sep 12, 2025

Filed

vs. sector median

+9 wks slower

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Massachusetts State AGbd_146b1f53c60894e92025-09-12Verified
Indiana State AGbd_2019399d7c1e51162025-09-12Verified
New Hampshire State AGbd_272a1556c4c122cb2025-09-12Verified
Maine State AGbd_2d3115e41d04814c2025-09-12Verified

Show 4 more filings ↓

HHS OCRbd_59996214baa7990a2025-09-12Verified
Oregon State AGbd_5dda442036246a0a2025-09-12Verified
Nebraska State AGbd_a69a282106dff8042025-09-12Verified
Vermont State AGbd_d8083dfb8c16fa9a2025-09-12Verified

Name: Roush Fenway Keselowski Racing
norm: roush fenway keselowski racing

Name: Roush Fenway Keselowski Racing
norm: roush fenway keselowski racing
Industry: Otherllm

Discovered: May 14, 2025
Materiality determined: —
Notification sent: Sep 12, 2025
Affected individuals: 6state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: This notice has not been delayed by law enforcement
Initial access: valid_credentials

During the incident: Launched an investigation with the assistance of third-party forensic specialists
Undertook a comprehensive review of the data at risk
Communicated with Roush Management in order to jointly provide you with notice
Providing you with access to 24 months of credit monitoring and identity protection services through TransUnion at no cost
Changes made: Implemented additional safeguards
Review our policies and procedures relating to data privacy and security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(121 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Massachusetts State AGSep 12 · first

Indiana State AGSep 12 · first

New Hampshire State AGSep 12 · first

Maine State AGSep 12 · first

HHS OCRSep 12 · first

Oregon State AGSep 12 · first

Nebraska State AGSep 12 · first

Vermont State AGSep 12 · first

Montana State AGSep 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/09/Consumer-notification-letter-37.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 12, 2025
Raw hash: 406ae7991e2356937c186366d9ebf7939b35d3a87be860184231fec6ef9dd368

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityRoush Fenway Keselowski Racing

Victim entityRoush Fenway Keselowski Racing

Incidentdiscovered May 14, 2025

Stated responseLaunched an investigation with the assistance of third-party forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov