MisuseRetail & ConsumerRetailPrivilege AbuseEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

E & J Gallo Winery

bd_4b28de6a2a6a1744 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 30, 2017

Filed

Sep 15, 2017

To disclose

16 days

Affected

20state residents only

Linked

4 filings

Confidence

67%

Full breach record for E & J Gallo Winery →3 incidents on file

E. & J. Gallo Winery notified the NH Attorney General that a former employee obtained unauthorized access to employee data on August 30, 2017. Data included names, SSNs, and financial account info for 20 NH residents. Gallo recovered the data, reported to law enforcement, and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 16 days

Aug 30, 2017

Discovered

Sep 15, 2017

Filed

vs. sector median

5 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_8a67bb2b9079a7902017-09-15Verified
Montana State AGbd_8ae8e0c7a0493e022017-09-15Candidate
Massachusetts State AGbd_b5d74016f624a2da2017-09-15Verified

Name: E & J Gallo Winery
norm: e j gallo winery
Domain: ejgallo.com

Name: E & J Gallo Winery
norm: e j gallo winery
Domain: ejgallo.com
Industry: Retail & Consumerllm

Discovered: Aug 30, 2017
Materiality determined: —
Notification sent: Sep 14, 2017
Affected individuals: 20state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: Reported the matter to law enforcement authorities
Initial access: insider_action

During the incident: Contacted the former employee and recovered the data
Reported the matter to law enforcement authorities
Providing 12 months of complementary credit monitoring and identity monitoring services to the affected residents through Experian
Changes made: Taken steps to enhance the security of our employee information in order to prevent similar incidents from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 days(16 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

California State AGSep 15 · first

Montana State AGSep 15 · first

Massachusetts State AGSep 15 · first

New Hampshire State AGSep 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ej-gallo-winery-20170915.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 15, 2017
Raw hash: 664a9906bebed7f2da570527ab23d387e46a1e3db5548ff2cac8ccd1f391c01a

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityE & J Gallo Winery

Victim entityE & J Gallo Winery

Incidentdiscovered Aug 30, 2017

Stated responseContacted the former employee and recovered the data

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov