DisclosureLens
HackingRetail & ConsumerRetailCustomer Data InvolvedDownstream VictimsPIIIdentity (basic)Government IDHighContained

Walter's Automotive Group

bd_dde13893024d03d7 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 4, 2021

Filed

Aug 19, 2021

To disclose

15 days

Affected · nationwide

11,1183 in this filing

Linked

7 records

Confidence

75%
Full breach record for Walter's Automotive Group →

Walter's Automotive Group, a commercial entity, reported a data breach to the Maine Attorney General's office. The breach, which occurred from June 9 to June 16, 2021, and was discovered on August 4, 2021, was described as an external system breach or hacking incident. The breach affected a total of 11,118 individuals, including 3 Maine residents. The compromised information included names and Social Security numbers. In response, the company provided written notification to affected consumers on August 19, 2021, and offered 12 months of credit monitoring and identity theft protection services through Equifax for individuals whose Social Security numbers were impacted.

Maine clockDiscovered Aug 4, 2021 → Filed with AG Aug 19, 202115d ✓ ME AG ≤30d15 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 56 days
discovery → filing · 15 days

Jun 9, 2021

Begins

Aug 4, 2021

Discovered

Aug 19, 2021

Filed

vs. sector median

7 wks faster

This filing is one of 7 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 4d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Montana State AGAug 19 · first
California State AGAug 19 · first
Massachusetts State AGAug 19 · first
Indiana State AGAug 19 · first
Maine State AGAug 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.