HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICPIILowResolved

Five Guys Enterprises, LLC & Five Guys Operations, LLC

bd_0fc4fab3c6c56102 · schema v1 · pii pii-v1

Full breach record for Five Guys Enterprises, LLC & Five Guys Operations, LLC →

Five Guys Enterprises, LLC reported unauthorized access to two employee email accounts. Access to the first account occurred between March 20, 2023, and March 31, 2023; access to the second occurred between May 31, 2023, and June 7, 2023. The investigation determined that emails or attachments contained names and other personal information. Five Guys engaged a cybersecurity firm, secured the accounts, and offered one year of credit monitoring and identity protection services via IDX.

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

bd_1c74f539f3ee0499Maine State AGfiled 2023-10-27Verified
bd_fb29d9533dde4853Montana State AGfiled 2023-10-27Candidate

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-575754
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 27, 2023
Raw hash: 2f47c3c4ffe175cb998980b9a983fa7179d2d491bde5b19f1b025f1d7b1ff2ed

Reporting entity

Name: Five Guys Enterprises, LLC & Five Guys Operations, LLC
norm: five guys enterprises llc five guys operations

Victim entity

Name: Five Guys Enterprises, LLC & Five Guys Operations, LLC
norm: five guys enterprises llc five guys operations

Incident

Discovered: —
Materiality determined: —
Notification sent: Oct 27, 2023
Affected individuals: Not disclosed
Data types: IDENTITY_BASICPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External

Compliance

Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.