DisclosureLens
HackingAgriculture & FoodRetail & ConsumerAgricultureCustomer Data InvolvedGovernment IDHighContained

Craft Beer Company GP

bd_150e1b9bf19ebf52 · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 5, 2024

Filed

May 8, 2024

To disclose

9 weeks

Affected · nationwide

1,5841 in this filing

Linked

3 filings

Confidence

50%
Full breach record for Craft Beer Company GP2 incidents on file

Craft Beer Company GP, a beverage company, reported a data breach affecting one Maine resident. The breach, which occurred from March 4 to March 14, 2024, was discovered on March 5, 2024. The incident was categorized as an external system breach or hacking, resulting in the compromise of the affected individual's name and driver's license number. The company notified the affected resident on May 8, 2024, and offered 24 months of identity theft protection services through Experian.

Maine clockDiscovered Mar 5, 2024Filed with AG May 8, 202464d ME AG >30d9 weeks discovery → filing
AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1 days
discovery → filing · 9 weeks / 64 days

Mar 4, 2024

Begins

Mar 5, 2024

Discovered

May 8, 2024

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Maine State AGMay 8 · first · this page

Pattern: first filing May 8 (ME), last Nov 13 (MD) — a 554-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.