HackingRetail & ConsumerRetailStolen CredentialsCustomer Data InvolvedTargetedPIIIdentity (basic)Government IDMediumContained

CHARTER FOODS, INC.

bd_33d6fee4160c4b1b · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 2, 2023

To disclose

—

Affected

3state residents only

Linked

5 filings

Confidence

66%

Full breach record for CHARTER FOODS, INC. →

Charter Foods, Inc. notified Montana employees of a criminal cybersecurity attack occurring on or around January 13, 2023. Unauthorized access may have exposed PII including names, addresses, DOBs, and SSNs. The company engaged third-party experts, secured systems, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 13, 2023

Begins

May 2, 2023

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_364fe6fa9f7bc7332023-05-01 · +1dCandidate
New Hampshire State AGbd_8292b920e2e4568c2023-05-09 · +7dVerified
Indiana State AGbd_08bd2b5ce5c897412023-04-07 · +25dVerified
Vermont State AGbd_d59a04854f1cc1ac2023-04-07 · +25dVerified

Name: CHARTER FOODS, INC.
norm: charter foods
Domain: charterfoods.net

Name: CHARTER FOODS, INC.
norm: charter foods
Domain: charterfoods.net
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Jan 13, 2023
Materiality determined: —
Notification sent: Apr 7, 2023
Affected individuals: 3state-resident count only
Data types: PIIIdentity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Took immediate steps to secure its systems and investigate the nature and scope of the Incident
Offering complimentary access to identity monitoring, fraud consultation, and identity theft restoration services
Implemented a series of cybersecurity enhancements, including installation of additional endpoint detection and response software
Installation of new firewalls
Implementation of additional threat analysis protocols
Rebuilding affected servers
Changes made: Implemented a series of cybersecurity enhancements, including installation of additional endpoint detection and response software
Installation of new firewalls
Implementation of additional threat analysis protocols
Rebuilding affected servers
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGApr 7 · first

Vermont State AGApr 7 · first

Maine State AG+24d

Montana State AG+25d · this page

New Hampshire State AG+32d

Pattern: first filing Apr 7 (IN), last May 9 (NH) — a 32-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-237.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 2, 2023
Raw hash: ace597d895881064a003dcaae04d6cce520244ae6f831ef0d30bc4cb68e639bc

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityCHARTER FOODS, INC.

Victim entityCHARTER FOODS, INC.

IncidentUnauthorized Access

Stated responseTook immediate steps to secure its systems and investigate the nature and scope of the Incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov