Monro, Inc.
bd_597f39e11b1b7606 · schema v1 · pii pii-v1
Full breach record for Monro, Inc. →2 incidents on fileMonro, Inc. notified the Maryland Attorney General of a security incident where an unauthorized actor accessed an employee's electronic mailbox in late November 2024. The breach exposed personal information of approximately 8,329 Maryland residents, including names, social security numbers, addresses, dates of birth, ID numbers, and certain health information such as accident history. Monro responded by changing passwords, modifying email controls, increasing user training, and notifying law enforcement. The company is offering 12 months of complimentary Experian IdentityWorks services to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Nov 29, 2024
Begins
Nov 29, 2024
Discovered
Mar 20, 2025
Filed
vs. sector median
+8 wks slower
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- Indiana State AGbd_3909ba1739d123c42025-03-21 · +1dVerified
- Delaware State AGbd_81844f5cb8cb5b782025-03-21 · +1dVerified
- California State AGbd_f9efcb8fd813b56c2025-03-21 · +1dVerified
- New Hampshire State AGbd_688c27eeb1e682da2025-03-24 · +4dVerified
Show 6 more filings ↓Show fewer ↑up to 19d gap
- Vermont State AGbd_098cf4205b448a912025-03-25 · +5dVerified
- Massachusetts State AGbd_c8b2973a6792f7822025-03-25 · +5dVerified
- Maine State AGbd_eea3ee925e08d5fd2025-03-25 · +5dCandidate
- South Carolina State AGbd_3ac2d54b4965ee762025-03-26 · +6dVerified
- Rhode Island State AGbd_40d944e1175487512025-03-27 · +7dVerified
- Illinois State AGbd_31e308004c755e6d2025-03-01 · +19dVerified
Filing propagation · 11 filings · 11 states
View merged incident ↗Pattern: first filing Mar 1 (IL), last Mar 27 (RI) — a 26-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.