The Lyon-Waugh Auto Group

The Lyon Waugh Auto Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-02-10. 3,482 Massachusetts residents were affected. The report records the breach type as electronic.

The Lyon Waugh Auto Group experienced a ransomware attack on December 4, 2021, where an actor exploited a vulnerability to access systems. On January 7, 2022, it was determined that personal information of approximately 819 New Hampshire residents (employees, former employees, and customers) was accessed and potentially exfiltrated. Data included names, addresses, SSNs, and driver's license numbers. No financial data was impacted. The company restored systems from backups, did not pay ransom, and offered identity protection services.

The Lyon-Waugh Auto Group, an automotive dealership, experienced an external system breach on December 1, 2021, discovered on December 4, 2021. The breach impacted 51 Maine residents, compromising their names and driver's license or non-driver identification card numbers. Affected individuals were notified on February 9, 2022, and offered 24 months of identity protection services.