Social EngineeringBECData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
Five Guys Enterprises, LLC & Five Guys Operations, LLC
bd_1c74f539f3ee0499 · schema v1 · pii pii-v1
Full breach record for Five Guys Enterprises, LLC & Five Guys Operations, LLC →Five Guys Enterprises, LLC / Five Guys Operations, LLC reported a business email compromise incident in Maine affecting 3 residents. The breach occurred between March 20 and June 7, 2023, and was discovered on June 7, 2023. The incident involved the acquisition of Social Security Numbers. Notification was sent on October 27, 2023, offering one year of credit monitoring and identity theft protection services through IDX.
Maine clockDiscovered Jun 7, 2023 → Filed with AG Oct 27, 2023142d ✗ ME AG >90d20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_0fc4fab3c6c56102California State AGfiled 2023-10-27Verified
- bd_fb29d9533dde4853Montana State AGfiled 2023-10-27Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ae557ca2-d4f2-4314-b743-8d7e75e7df9b.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 27, 2023
- Raw hash
- 60bca08dbc624bab72cca65d6808f323c9153a16e1c1822e719f5d06a0aef532
Reporting entity
- Name
- BAKER & HOSTETLER LLPnorm: baker hostetler
Victim entity
- Name
- Five Guys Enterprises, LLC & Five Guys Operations, LLCnorm: five guys enterprises llc five guys operations
Incident
- Discovered
- Jun 7, 2023
- Materiality determined
- —
- Notification sent
- Oct 27, 2023
- Affected individuals
- 3
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1566 Phishing
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 20 weeks(142 days from discovery to filing)
- Compliance flags
- ME AG >90d · 142dME resident >60d · 142d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 7, 2023→ Filed with AG: Oct 27, 2023142d 90 days ME AG >90d Maine Discovered: Jun 7, 2023→ Notified: Oct 27, 2023142d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.