MalwareRansomwareData ExfiltratedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICEMPLOYMENTMINORMediumContained
AmeriCold
bd_0cac8bbf3d5a932c · schema v1 · pii pii-v1
Full breach record for AmeriCold →Americold Logistics LLC experienced a cybersecurity incident on April 26, 2023, involving malware deployment and data exfiltration. Affected data included names, addresses, SSNs, financial account info, and health insurance details for employees and dependents. Forensic investigation was launched, and two years of identity monitoring were offered.
California clockDiscovered Apr 26, 2023 → Notified Dec 8, 2023226d ✗ CA 60-day late32 weeks discovery → filing
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_2c4fec73bf2ea11aVermont State AGfiled 2023-12-08Verified
- bd_9e9da069ab209cc8Maine State AGfiled 2023-12-08Candidate
- bd_bb46f50d69e5ca3fOregon State AGfiled 2023-12-08Verified
- bd_f1c81e9d6f9d9efeWashington State AGfiled 2023-12-08Verified by operator
Show 1 more filing ↓Show fewer ↑
- bd_f7cc524490b4564fMontana State AGfiled 2023-12-08Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-577648
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 8, 2023
- Raw hash
- 9f090d8e2b08d9bb9359536d367538ea69c5781d0e32d5b901dea35bbbf03157
Reporting entity
- Name
- AmeriColdnorm: americold
- Domain
- americoldinc.com
Victim entity
- Name
- AmeriColdnorm: americold
- Domain
- americoldinc.com
Incident
- Discovered
- Apr 26, 2023
- Materiality determined
- —
- Notification sent
- Dec 8, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICEMPLOYMENTMINOR
- Attack vector
- Unknown
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported the matter to law enforcement
Compliance
- Time to disclose
- 32 weeks(226 days from discovery to filing)
- Compliance flags
- CA 60-day late · 226d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 26, 2023→ Notified: Dec 8, 2023226d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.