HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_GOVERNMENTMedium
Yesway
bd_4a1b99e0197cad10 · schema v1 · pii pii-v1
Full breach record for Yesway →Yesway, a convenience store operator, reported a data breach affecting one Maine resident. The breach occurred between May 29, 2023, and June 1, 2023, and was discovered on November 30, 2023. The incident was described as a vendor security issue and resulted in the compromise of the resident's Social Security Number. Yesway offered two years of credit monitoring and identity theft protection services through IDX.
Maine clockDiscovered Nov 30, 2023 → Filed with AG Jan 24, 202455d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_41bbac558d38a784Indiana State AGfiled 2024-01-24Candidate
- bd_ad4e168bdab03521New Hampshire State AGfiled 2024-01-24Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6a552752-3708-4d7c-8bc5-fcffa967013a.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 24, 2024
- Raw hash
- d1df18d79e631c1a8a14ffad053894fe1a98f9834e757f933d6f366b49947a1c
Reporting entity
- Name
- Yeswaynorm: yesway
Victim entity
- Name
- Yeswaynorm: yesway
Incident
- Discovered
- Nov 30, 2023
- Materiality determined
- —
- Notification sent
- Jan 24, 2024
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(55 days from discovery to filing)
- Compliance flags
- ME AG >30d · 55d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 30, 2023→ Filed with AG: Jan 24, 202455d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.