HackingHacking OtherIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
AutoZone, Inc.
bd_547d20145f6a4aa8 · schema v1 · pii pii-v1
Full breach record for AutoZone, Inc. →AutoZone, Inc. reported a data breach to the Maine Attorney General, which occurred on May 28, 2023, and was discovered on November 3, 2023. The breach, described as an external system hacking incident, affected 293 Maine residents. The compromised data includes names and Social Security Numbers. Affected individuals were notified on November 21, 2023, and offered 12 months of three-bureau credit monitoring through Equifax.
Leak gap clock⏱ Leak >90d17 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
A leak claim by cl0p about this victim predates this filing by 136 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_194dee6c6b6f32a0Leak Sitecl0pfiled 2023-07-07(136d gap)Candidate
Regulatory filings (3) · sorted by filing gap
- bd_367ded5d15c02eb1Montana State AGfiled 2023-11-20Verified
- bd_e2dcaa9f4f49c3c5Oregon State AGfiled 2023-11-21(1d gap)Verified
- bd_a895d70c2f1e3c60Washington State AGfiled 2023-11-22(2d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/4b650bee-f556-4b08-8659-f0e1207aa969.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 20, 2023
- Raw hash
- 67225a5761c2c738327f83f3603a3be823dd7746c626da92941ae90efc975d87
Reporting entity
- Name
- AutoZone, Inc.norm: autozone
- Domain
- autozone.com
Victim entity
- Name
- AutoZone, Inc.norm: autozone
- Domain
- autozone.com
Incident
- Discovered
- Nov 3, 2023
- Materiality determined
- —
- Notification sent
- Nov 21, 2023
- Affected individuals
- 293
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 17 days(17 days from discovery to filing)
- Compliance flags
- Leak >90dME AG ≤30d · 17d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 3, 2023→ Filed with AG: Nov 20, 202317d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.