HackingRetail & ConsumerRetailStolen CredentialsDelayed DiscoveryGovernment IDIdentity (basic)EmploymentMediumActive

Van Eerden Food Services

bd_30f84678e3ffc4b2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 7, 2021

Filed

Nov 5, 2021

To disclose

29 days

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Van Eerden Food Services →

Van Eerden Food Services notified employees of a data security incident discovered on October 7, 2021. Unauthorized access to employee records containing SSNs, names, addresses, DOBs, and salary data occurred. Forensic experts confirmed unauthorized access but could not determine if data was acquired. The company engaged legal counsel and forensic firms, implemented security measures, and notified credit bureaus.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 29 days

Oct 7, 2021

Discovered

Nov 5, 2021

Filed

vs. sector median

5 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_57e4ab10fd6976282021-11-05Verified

Name: Van Eerden Food Services
norm: van eerden food

Name: Van Eerden Food Services
norm: van eerden food
Industry: Retail & Consumerllm

Discovered: Oct 7, 2021
Materiality determined: —
Notification sent: Nov 5, 2021
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)Employment
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Consulted with outside legal counsel
Retained a forensics firm to analyze computer systems
Conducted a thorough review of the potentially affected records
Implemented additional security measures
Notifying consumer reporting agencies of this incident
Changes made: Implemented additional security measures designed to prevent a recurrence
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGNov 5 · first

Montana State AGNov 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-92.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 5, 2021
Raw hash: 2f13f3d6a42977c4d79ccc75286aa03d6be83f9cc7b13224e764c0bc37614009

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityVan Eerden Food Services

Victim entityVan Eerden Food Services

Incidentdiscovered Oct 7, 2021

Stated responseConsulted with outside legal counsel

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov