HackingAgriculture & FoodTransportation & LogisticsAgricultureStolen CredentialsEmployee Data InvolvedIdentity (basic)Government IDMediumActive

DOT FOODS, INC.

bd_231409942293f392 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 3, 2025

Filed

Jan 8, 2026

To disclose

5 weeks

Affected

6state residents only

Linked

5 filings

Confidence

65%

Full breach record for DOT FOODS, INC. →

Dot Foods, Inc. and Dot Transportation, Inc. notified Massachusetts residents of an incident where an unauthorized actor accessed a small number of email accounts between December 3-4, 2025. The actor viewed certain email messages, potentially including attachments containing names and Social Security numbers. The company secured the accounts, engaged forensic specialists, and is offering 24 months of credit monitoring. The investigation is ongoing.

J jump to incidentP pin to compareR raw source

Massachusetts clock⏱ MA AG >30d5 weeks discovery → filing

Incident timeline

discovery → filing · 5 weeks / 36 days

Dec 3, 2025

Begins

Dec 3, 2025

Discovered

Jan 8, 2026

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_4b17fbb7cfac751f2026-01-07 · +1dVerified by operator
Maine State AGbd_9789df32322e926b2026-01-07 · +1dVerified
Indiana State AGbd_cec278b5aed088e32026-01-07 · +1dVerified
Nebraska State AGbd_d8b20ac4bfff479b2026-01-07 · +1dVerified

Name: DOT FOODS, INC.
norm: dot foods
Domain: dotfoods.com

Name: DOT FOODS, INC.
norm: dot foods
Domain: dotfoods.com
Industry: Agriculture & FoodllmTransportation & Logisticsllm

Discovered: Dec 3, 2025
Breach occurred: Dec 3, 2025 – Dec 4, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 6state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1114 Email CollectionT1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Secured those email accounts
Started an extensive investigation, with the assistance of cybersecurity and computer forensics specialists
Locked down access to Dot Rewards platform
Offering complimentary credit monitoring and identity restoration services to you for 24 months through Norton LifeLock
Changes made: Reviewed our existing policies and procedures
Enhanced technical safeguards to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: MA AG >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGJan 7 · first

Maine State AGJan 7 · first

Indiana State AGJan 7 · first

Nebraska State AGJan 7 · first

Massachusetts State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-27-dot-foods-inc-dot-transportation-inc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 8, 2026
Raw hash: 19b571ae3f87a96bd3032ce27ce689a1997c576818ed6ac531b0988b17f22012

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityDOT FOODS, INC.

Victim entityDOT FOODS, INC.

Incidentdiscovered Dec 3, 2025

Stated responseSecured those email accounts

ComplianceMA AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov