PS Logistics

Summary

PS Logistics experienced an external hacking incident compromising personal identifiers, including names, of 21 Maine residents. The breach was discovered following unauthorized system access, prompting written consumer notifications and the provision of 12 months of identity theft protection services through Epiq. Legal representation for the entity confirmed the incident as an external system breach, though the total number of affected individuals beyond Maine residents remains unspecified.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On February 20, 2024, Carriage Purchaser, Inc., operating as PS Logistics, experienced an external system breach resulting from hacking activity. The breach compromised personal information, specifically names combined with other personal identifiers, though the exact nature of the additional compromised data elements was not detailed in the notification. PS Logistics, headquartered at 1927 1st Avenue North in Birmingham, Alabama, discovered the incident on December 16, 2024—nearly ten months after the breach occurred. The attack affected 21 Maine residents, though the total number of impacted individuals across all jurisdictions remained unspecified in the breach filing. The delayed discovery timeline indicates the breach persisted undetected for an extended period before investigation.

PS Logistics initiated written notifications to affected Maine consumers on December 19, 2024, three days after discovering the breach. The company engaged McDonald Hopkins, PLC attorney Blair Dawson to submit the breach disclosure to Maine authorities, confirming compliance with state notification laws. A redacted copy of the consumer notice was filed alongside the regulatory submission, though its contents were not publicly detailed. PS Logistics offered affected individuals 12 months of identity theft protection services through provider Epiq, though the specific features of these services were not enumerated beyond the general description. No prior breach notifications involving PS Logistics had been submitted to Maine authorities within the preceding 12-month period. The breach investigation did not disclose whether threat actors accessed additional corporate systems beyond the compromised external infrastructure.

Sources

Sources available to members: 1 source.