HackingTransportation & LogisticsTransportationDelayed DiscoveryIdentity (basic)Government IDPIIMediumContained

Commercial Specialty Truck Holdings

bd_f4d586f909ccec4f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 21, 2024

Filed

Feb 11, 2025

To disclose

25 weeks

Affected

2state residents only

Linked

3 filings

Confidence

64%

Full breach record for Commercial Specialty Truck Holdings →

Commercial Specialty Truck Holdings notified Maryland AG of unauthorized access to files containing names, SSNs, and health insurance numbers for 2 Maryland residents. Incident occurred Aug 7, 2024; discovered Aug 21, 2024. Notification sent Feb 11, 2025. Remediation includes credit monitoring via Kroll and system security enhancements.

J jump to incidentP pin to compareR raw source

Maryland clock✗ MD AG >90d25 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 14 days

discovery → filing · 25 weeks / 174 days

Aug 7, 2024

Begins

Aug 21, 2024

Discovered

Jan 27, 2025

Scope determined

Feb 11, 2025

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Nebraska State AGbd_fc64dd6067c52a6a2025-02-11Verified
Indiana State AGbd_63fdc2565c8a3f2c2025-02-09 · +2dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Commercial Specialty Truck Holdings
norm: commercial specialty truck
Industry: Transportation & Logisticsllm

Discovered: Aug 21, 2024
Breach occurred: Aug 7, 2024
Undetected for: 14 daysoccurrence → discovery
Materiality determined: Jan 27, 2025
Notification sent: Feb 11, 2025
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External

During the incident: Moved quickly to investigate and respond to the event
Assessed the security of CSTH systems
Identified potentially affected individuals
Providing access to complimentary credit monitoring services for twelve (12) months, through Kroll
Providing notified individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this event to relevant state regulators
Changes made: Implemented technical security measures to strengthen the security of our systems
Reviewing our policies, procedures, and processes related to the storage and access to personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(174 days from discovery to filing)
Compliance flags: MD AG >90d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGFeb 9 · first

Nebraska State AG+2d

Maryland State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376347.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 11, 2025
Raw hash: 94b2e94ec676cb71f9cb2f7332afe576d2eeacbe04d88f5f583851b1e1ebc13d

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityCommercial Specialty Truck Holdings

Incidentdiscovered Aug 21, 2024

Stated responseMoved quickly to investigate and respond to the event

ComplianceMD AG >90d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov