HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
LANDSTAR SYSTEM, INC.
bd_ecbaa0d72db8ba88 · schema v1 · pii pii-v1
Full breach record for LANDSTAR SYSTEM, INC. →Landstar System Holdings, Inc. reported an external system breach (hacking) in Maine affecting 23 residents. Unauthorized access occurred between April 29-30, 2026, involving name and driver's license data. Landstar blocked access, notified law enforcement, engaged forensic experts, and implemented enhanced authentication. Credit monitoring via TransUnion was offered to affected individuals.
Maine clockDiscovered Apr 30, 2026 → Filed with AG Jun 11, 202642d ⏱ ME AG >30d6 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2ab674753f4a9822New Hampshire State AGfiled 2026-06-11Verified
- bd_808662ed62af1abbVermont State AGfiled 2026-06-11Verified
- bd_b32e1f41e481e946Indiana State AGfiled 2026-06-11Verified
- bd_6a1bd42d7cb9838dTexas State AGfiled 2026-06-18(7d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6709a51f-4865-4b2d-9ec2-9c8d9e679d79.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 11, 2026
- Raw hash
- d145df043482b0a7bd2bbd781bf1ac7dc3733f57404a7f67d4d14d0cb5155122
Reporting entity
- Name
- LANDSTAR SYSTEM, INC.norm: landstar system
Victim entity
- Name
- LANDSTAR SYSTEM, INC.norm: landstar system
Incident
- Discovered
- Apr 30, 2026
- Materiality determined
- —
- Notification sent
- Jun 11, 2026
- Affected individuals
- 23
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Landstar is providing written notice of this incident to relevant state regulators, as necessary and as required by law, and to the three major credit reporting agencies, Equifax, Experian, and TransUnion
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(42 days from discovery to filing)
- Compliance flags
- ME AG >30d · 42d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 30, 2026→ Filed with AG: Jun 11, 202642d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.