Social EngineeringTransportation & LogisticsTransportationPhishingData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

U.S. Xpress Enterprises, Inc.

bd_f337c034b1fd8b4b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 18, 2019

Filed

Apr 10, 2020

To disclose

25 weeks

Affected

16state residents only

Linked

3 filings

Confidence

68%

Full breach record for U.S. Xpress Enterprises, Inc. →4 incidents on file

U.S. Xpress Enterprises, Inc. notified the New Hampshire Attorney General of a phishing incident affecting 16 state residents. An employee's email account was compromised via a malicious link/attachment in September 2019. Affected data included names, driver's license numbers, SSNs, or financial account numbers. USX engaged forensic experts, blocked access, implemented MFA, and offered credit monitoring to victims.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 47 days

discovery → filing · 25 weeks / 175 days

Sep 1, 2019

Begins

Oct 18, 2019

Discovered

Apr 10, 2020

Filed

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_adef4aa0598a77522020-04-10Candidate
Indiana State AGbd_b3fae1a9e6dde2c22020-04-10Verified

Name: Baker, Donelson, Bearman, Caldwell & Berkowitz, A Professional Corporation
norm: baker donelson bearman caldwell berkowitz a

Name: U.S. Xpress Enterprises, Inc.
norm: us xpress
Industry: Transportation & Logisticsllm

Discovered: Oct 18, 2019
Breach occurred: Sep 1, 2019
Undetected for: 47 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 10, 2020
Affected individuals: 16state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General's Office
Initial access: phishing_link

During the incident: Engaged outside technical experts to further investigate
Blocked the unauthorized access
Sent notification letters via U.S. Mail to affected residents
Offered one year of free credit monitoring and $1 million in identity theft insurance through Experian
Changes made: Activated multi-factor authentication for all email users by October 24, 2019
Trained or retrained email users to reinforce security awareness
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(175 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGApr 10 · first

Indiana State AGApr 10 · first

New Hampshire State AGApr 10 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/us-xpress-enterprises-20200410.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 10, 2020
Raw hash: 1d71af412ddba3304b448907c1850c99fe955c4ba5aee94532b93a95e751354b

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityBaker, Donelson, Bearman, Caldwell & Berkowitz, A Professional Corporation

Victim entityU.S. Xpress Enterprises, Inc.

Incidentdiscovered Oct 18, 2019

Stated responseEngaged outside technical experts to further investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov