HackingRetail & ConsumerRetailTargetedIdentity (basic)Government IDMediumContained

MAC Pizza Management, Inc

bd_01a464e5539cf4e2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 17, 2023

Filed

Jul 7, 2023

To disclose

12 weeks

Affected

1state residents only

Linked

4 filings

Confidence

65%

Full breach record for MAC Pizza Management, Inc →

MAC Pizza Management, Inc. notified individuals of a cyber-attack discovered on April 17, 2023. Unauthorized access occurred between April 14 and April 22, 2023. Personal information including names, Social Security numbers, and potentially driver's license numbers was accessed. The company engaged forensic investigators and notified law enforcement.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 3 days

discovery → filing · 12 weeks / 81 days

Apr 14, 2023

Begins

Apr 17, 2023

Discovered

Jul 7, 2023

Filed

vs. sector median

+4 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_1372e3d0ed50adec2023-07-07Verified
Indiana State AGbd_84156f1a421a95a02023-07-07Verified
Maine State AGbd_e5edffcacbfdd7862023-07-07Verified

Name: MAC Pizza Management, Inc
norm: mac pizza management

Name: MAC Pizza Management, Inc
norm: mac pizza management
Industry: Retail & Consumerllm

Discovered: Apr 17, 2023
Breach occurred: Apr 14, 2023 – Apr 22, 2023
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 7, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: notified law enforcement

During the incident: Promptly began an investigation
Notified law enforcement
Worked to secure our systems
Engaged a forensic security firm to assist with our investigation and confirm the security of our computer systems
Changes made: Enhancing our technical security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(81 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGJul 7 · first

Indiana State AGJul 7 · first

Maine State AGJul 7 · first

Montana State AGJul 7 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-406.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 7, 2023
Raw hash: cc21cb736507387c0b98753c8bec9fb40f0348f6eb67539168dfa8f181b1f8ea

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMAC Pizza Management, Inc

Victim entityMAC Pizza Management, Inc

Incidentdiscovered Apr 17, 2023

Stated responsePromptly began an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov