HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHighContained
Wegmans Food Markets Inc.
bd_00a0f7ed1c64583a · schema v1 · pii pii-v1
Full breach record for Wegmans Food Markets Inc. →Wegmans Food Markets Inc. reported a credential-stuffing attack on January 28, 2021, discovered on February 11, 2021. The incident affected 2,775 individuals, including 1 Maine resident. Consumers received written notification on March 26, 2021, and were offered one year of credit monitoring and identity theft protection through Experian.
Maine clockDiscovered Feb 11, 2021 → Filed with AG Mar 31, 202148d ⏱ ME AG >30d7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,775 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0c91383d-a037-464a-9c6f-3b58d54a477b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 31, 2021
- Raw hash
- 5821e6d44705bfe15124af97f2174fce9de922c4e59e25893af94096721f3eb3
Reporting entity
- Name
- HARTER SECREST & EMERY LLPnorm: harter secrest emery
Victim entity
- Name
- Wegmans Food Markets Inc.norm: wegmans food markets
Incident
- Discovered
- Feb 11, 2021
- Materiality determined
- —
- Notification sent
- Mar 26, 2021
- Affected individuals
- 2,775
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1110 Brute ForceT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(48 days from discovery to filing)
- Compliance flags
- ME AG >30d · 48d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 11, 2021→ Filed with AG: Mar 31, 202148d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.