HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
JACMAR COMPANIES, LLC, THE
bd_5665bd035e907d72 · schema v1 · pii pii-v1
Full breach record for JACMAR COMPANIES, LLC, THE →The Jacmar Companies (including Shakey's USA, Inc. and Jacmar Foodservice Distribution) notified consumers of a cybersecurity incident where unauthorized access to its network occurred on or around June 2, 2023. The investigation, concluded November 15, 2023, determined that full names and government identifiers (SSN, driver's license) were exfiltrated. The company engaged outside cybersecurity professionals and is offering complimentary Equifax credit monitoring.
Vermont clock✗ VT AG >45 bday28 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_493afb2c0f759a15Maine State AGfiled 2023-12-13Candidate
- bd_8c46d6552bc2ddcbCalifornia State AGfiled 2023-12-13Verified by operator
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-12-13-jacmar-companies-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 13, 2023
- Raw hash
- 404b085b44e39f87f6883b3681161449b32b45036c74f18c40a09e7eda274e80
Reporting entity
- Name
- JACMAR COMPANIES, LLC, THEnorm: jacmar companies llc the
Victim entity
- Name
- JACMAR COMPANIES, LLC, THEnorm: jacmar companies llc the
Incident
- Discovered
- Jun 2, 2023
- Materiality determined
- Dec 13, 2023
- Notification sent
- Dec 13, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 28 weeks(194 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.