HackingGovernment IDIdentity (basic)MediumActive

Arrow Truck Sales, Inc.

bd_fe656f3763488e26 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 10, 2021

To disclose

—

Affected

12state residents only

Confidence

68%

Full breach record for Arrow Truck Sales, Inc. →4 incidents on file

Arrow Truck Sales, Inc. filed a supplemental notice with the New Hampshire Attorney General on March 9, 2021, updating a prior January 2021 breach. The incident involved an unauthorized third party acquiring personal information, including names, Social Security numbers, and dates of birth, affecting 12 New Hampshire residents. The company provided 24 months of credit monitoring via Kroll and enhanced cybersecurity protections.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Mar 10, 2021

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed12 affectedView incident

Name: Arrow Truck Sales, Inc.
norm: arrow truck sales

Name: Arrow Truck Sales, Inc.
norm: arrow truck sales

Discovered: —
Materiality determined: —
Notification sent: Mar 5, 2021
Affected individuals: 12state-resident count only
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: notified your office about on January 7, 2021

During the incident: Worked with outside cybersecurity experts
Deployed extensive additional and enhanced cybersecurity protections
Monitoring and screening tools
Review of the data from our systems
Sending these additional New Hampshire residents formal notices
Providing these individuals with 24 months of free identity theft and credit monitoring services and call center support through Kroll
Changes made: Deployed extensive additional and enhanced cybersecurity protections throughout our environment
Regularly evaluate and reinforce our IT security protocols
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/arrow-truck-sales-20210310.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 10, 2021
Raw hash: 3c69851bf45eca3daf01645e5cc32eca2202a96dec11a258397948df276fed4f

Reporting entityArrow Truck Sales, Inc.

Victim entityArrow Truck Sales, Inc.

IncidentUnauthorized Access

Stated responseWorked with outside cybersecurity experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov