Speedway LLC
bd_2957f011b558d0bd · schema v1 · pii pii-v1
All records for Speedway LLC →2 incidents on fileAccount takeover notice
Speedway LLC notified customers of unauthorized access to their accounts. The filing says: “Note also that they used your email address and passcode, most likely obtained from another source where you used the same passcode or by guessing the code.”
Speedway experienced a security incident involving unauthorized access to Speedy Rewards accounts via credential stuffing and guessing. The incident occurred between April 11 and April 17, 2023. Affected data included names, email addresses, points balances, and other account details. Speedway engaged forensic experts, reset passcodes, and refunded redeemed points. No credit or financial account data was compromised.
J jump to incidentP pin to compareR raw source
Incident timeline
Apr 11, 2023
Begins
Apr 17, 2023
Discovered
May 16, 2023
Filed
vs. sector median
5 wks faster
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Massachusetts State AGbd_18b558d719b181192023-05-16Verified
- New Hampshire State AGbd_5fef8f8c03ef02262023-05-16Verified
- Indiana State AGbd_676831c602e20aad2023-05-16Verified
- Maine State AGbd_ed862421c0e8be782023-05-16Candidate
Show 1 more filing ↓Show fewer ↑
- Montana State AGbd_fa1b260ef09dc93b2023-05-16Verified
Filing propagation · 6 filings · 6 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.