J.B. Hunt Transport, Inc.

The Washington Attorney General's Office reported that J.B. Hunt Transport, Inc. experienced a cybersecurity incident due to a configuration error in the Microsoft Power Apps portal. The breach involved unauthorized access to applicant information between August 17, 2020, and July 2, 2021, affecting 3,798 residents whose names and Social Security numbers were compromised. Notification letters were sent beginning October 20, 2021, to the affected residents, and J.B. Hunt is offering complimentary one-year subscriptions to credit monitoring services.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=11236

TPRM report: https://scoringcyber.rankiteo.com/company/jb-hunt-transport-services-inc

"id": "jb-836072525",
"linkid": "jb-hunt-transport-services-inc",
"type": "Breach",
"date": "8/2020",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': 3798,
                        'industry': 'Transportation',
                        'name': 'J.B. Hunt Transport, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Configuration Error',
 'customer_advisories': 'Complimentary one-year subscriptions to credit '
                        'monitoring services offered',
 'data_breach': {'number_of_records_exposed': 3798,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Social Security numbers']},
 'date_detected': '2021-07-02',
 'date_publicly_disclosed': '2021-10-20',
 'description': 'J.B. Hunt Transport, Inc. experienced a cybersecurity '
                'incident due to a configuration error in the Microsoft Power '
                'Apps portal, resulting in unauthorized access to applicant '
                'information.',
 'impact': {'data_compromised': ['Names', 'Social Security numbers']},
 'post_incident_analysis': {'root_causes': 'Configuration error in Microsoft '
                                           'Power Apps portal'},
 'references': [{'source': "Washington Attorney General's Office"}],
 'response': {'communication_strategy': 'Notification letters sent to affected '
                                        'residents'},
 'title': 'J.B. Hunt Transport Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Microsoft Power Apps portal configuration error'}