Social EngineeringOtherPhishingData ExfiltratedIdentity (basic)Government IDMediumActive

DOT FOODS, INC.

bd_4b17fbb7cfac751f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 3, 2025

Filed

Jan 7, 2026

To disclose

5 weeks

Affected

1state residents only

Linked

5 filings

Confidence

64%

Full breach record for DOT FOODS, INC. →

Dot Foods, Inc. notified Montana residents of a data breach where an unauthorized actor viewed emails between Dec 3-4, 2025. Attachments containing names and SSNs may have been accessed. The company secured accounts, engaged forensic specialists, and offers 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 35 days

Dec 3, 2025

Begins

Dec 3, 2025

Discovered

Jan 7, 2026

Filed

vs. sector median

3 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_9789df32322e926b2026-01-07Verified
Indiana State AGbd_cec278b5aed088e32026-01-07Verified
Nebraska State AGbd_d8b20ac4bfff479b2026-01-07Verified
Massachusetts State AGbd_231409942293f3922026-01-08 · +1dVerified

Name: DOT FOODS, INC.
norm: dot foods
Domain: dotfoods.com

Name: DOT FOODS, INC.
norm: dot foods
Domain: dotfoods.com
Industry: Otherllm

Discovered: Dec 3, 2025
Breach occurred: Dec 3, 2025 – Dec 4, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1114 Email Collection
Threat actor: External
Initial access: phishing_link

During the incident: Secured impacted email accounts
Engaged cybersecurity and computer forensics specialists
Locked down access to Dot Rewards platform
Offered complimentary credit monitoring and identity restoration services for 24 months through Norton LifeLock
Changes made: Reviewed existing policies and procedures
Enhanced technical safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGJan 7 · first

Indiana State AGJan 7 · first

Nebraska State AGJan 7 · first

Montana State AGJan 7 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2026/05/Consumer-notification-letter-3.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 7, 2026
Raw hash: 5879952e3bd14672b0bb85f4029f03e66bd109c728ab09b7b4383011e51370c3

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityDOT FOODS, INC.

Victim entityDOT FOODS, INC.

Incidentdiscovered Dec 3, 2025

Stated responseSecured impacted email accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov