HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Sarku Japan
bd_676946af941027ba · schema v1 · pii pii-v1
Full breach record for Sarku Japan →Sarku Japan, a restaurant chain, reported an external system breach (hacking) occurring on January 13, 2022, discovered on February 6, 2022. The incident compromised names and Social Security Numbers of 28,298 individuals, including 131 Maine residents. The company notified affected consumers in writing on March 16, 2022, and provided 12 months of credit monitoring and identity restoration services through Kroll.
Maine clockDiscovered Feb 6, 2022 → Filed with AG Mar 16, 202238d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_154978068a8580a4Washington State AGfiled 2022-03-16Candidate
- bd_3e7e01e462f64ab0California State AGfiled 2022-03-16Verified
- bd_6f1f4c9b26bfab19Oregon State AGfiled 2022-03-16Verified
- bd_2e9e3b153a51c8a6California State AGfiled 2022-08-08(145d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 145d gap
- bd_e82af6a75bb3e3f1Maine State AGfiled 2022-08-08(145d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/0f9d5952-14ea-453d-92d0-91a5793aaabd.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 16, 2022
- Raw hash
- 808ffa6c513216b799be38f369ab68c4f0feb7fe63d0000b9545e49d77ff4407
Reporting entity
- Name
- Sarku Japannorm: sarku japan
- Domain
- sarkujapan.com
Victim entity
- Name
- Sarku Japannorm: sarku japan
- Domain
- sarkujapan.com
Incident
- Discovered
- Feb 6, 2022
- Materiality determined
- —
- Notification sent
- Mar 16, 2022
- Affected individuals
- 28,298
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(38 days from discovery to filing)
- Compliance flags
- ME AG >30d · 38d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 6, 2022→ Filed with AG: Mar 16, 202238d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.