DisclosureLens
HackingRetail & ConsumerRetailData MishandlingSupply Chain (3P Vendor)Customer Data InvolvedPIIIdentity (basic)MediumContained

VOLKSWAGEN GROUP OF AMERICA, INC.

bd_f8e8f39ba9318f03 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 10, 2021

Filed

Jun 11, 2021

To disclose

13 weeks

Affected

3,064state residents only

Linked

11 filings

Confidence

64%
Full breach record for VOLKSWAGEN GROUP OF AMERICA, INC. →3 incidents on file

Volkswagen Group of America, Inc. notified Montana of a data security incident involving customer information obtained from a vendor. The vendor left electronic data unsecured between August 2019 and May 2021. Data included names, addresses, emails, phone numbers, and vehicle details. Notification sent June 14, 2021.

Incident timeline

undetected · 587 days
discovery → filing · 13 weeks / 93 days

Aug 1, 2019

Begins

Mar 10, 2021

Discovered

Jun 11, 2021

Filed

vs. sector median

+4 wks slower

This filing is one of 11 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 3d gap

Filing propagation · 11 filings · 11 states

View merged incident ↗
Maine State AGJun 10 · first
California State AGJun 10 · first
Massachusetts State AGJun 10 · first
Oregon State AGJun 10 · first
Hawaii State AGJun 10 · first
Idaho State AGJun 10 · first
Montana State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Volkswagen Group of America, Inc. — State AG breach notification · DisclosureLens