AccidentalTransportation & LogisticsTransportationMisconfigurationCustomer Data InvolvedIdentity (basic)Government IDMediumContained

J.B. Hunt Transport, Inc.

bd_e23585d36fb04fea · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 2, 2021

Filed

Oct 20, 2021

To disclose

16 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

64%

Full breach record for J.B. Hunt Transport, Inc. →5 incidents on file

J.B. Hunt Transport, Inc. notified Delaware residents of a security incident involving a configuration error in a Microsoft Power Apps portal used for driver applications. Unauthorized access occurred between August 17, 2020, and July 2, 2021, exposing applicants' names and Social Security numbers. J.B. Hunt offered one year of complimentary Experian IdentityWorks membership.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 319 days

discovery → filing · 16 weeks / 110 days

Aug 17, 2020

Begins

Jul 2, 2021

Discovered

Oct 20, 2021

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_59eb7fd25276ddbb2021-10-20Verified
California State AGbd_90f9ff5e002e9d732021-10-20Candidate
Massachusetts State AGbd_df7c6261f3db4b002021-10-20Verified

Name: J.B. Hunt Transport, Inc.
norm: jb hunt transport

Name: J.B. Hunt Transport, Inc.
norm: jb hunt transport
Industry: Transportation & Logisticsllm

Discovered: Jul 2, 2021
Breach occurred: Aug 17, 2020 – Jul 2, 2021
Undetected for: 319 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 10, 2021
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Misconfiguration
MITRE ATT&CK: T1510 Data Staged
Threat actor: External

During the incident: Offered you a complimentary one-year membership to Experian’s® IdentityWorksSM
Changes made: Reviewed permissions to access data in the cloud
Made modifications for all cloud services
Implemented other measures to help prevent unauthorized access to our data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(110 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGOct 20 · first

California State AGOct 20 · first

Massachusetts State AGOct 20 · first

Delaware State AGOct 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2021/11/JB-Hunt-Transport-Adult-CM-r1prf.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 20, 2021
Raw hash: f5f5e096903af0722c591bc8eacc6c67de3dc045e898b56b789854982531403c

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityJ.B. Hunt Transport, Inc.

Victim entityJ.B. Hunt Transport, Inc.

Incidentdiscovered Jul 2, 2021

Stated responseOffered you a complimentary one-year membership to Experian’s® IdentityWorksSM

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov