Bimbo Bakeries USA, Inc., and Bimbo Foods Bakeries Distribution, LLC
bd_6cdcbe1e3ff100c9 · schema v1 · pii pii-v1
Full breach record for Bimbo Bakeries USA, Inc., and Bimbo Foods Bakeries Distribution, LLC →Bimbo Bakeries USA, Inc. and Bimbo Foods Bakeries Distribution, LLC reported a security incident to the New Hampshire Attorney General on June 5, 2024. On February 13, 2024, an unauthorized third party gained remote access to a network server processing employee and vendor personal information. The breach affected 16 New Hampshire residents. Data types included names and government IDs (SSNs). No financial account or credit card data was involved. The company engaged outside cybersecurity experts, notified law enforcement, and offered 24 months of Experian IdentityWorks monitoring to affected individuals.
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/bimbo-bakeries-usa-foods-distribution-20240605.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 5, 2024
- Raw hash
- d960d4dd63af6c7841604af52da4821216f3a95c1ac8e984ec417915b0d0afe9
Reporting entity
- Name
- Bimbo Bakeries USA, Inc., and Bimbo Foods Bakeries Distribution, LLCnorm: bimbo bakeries usa inc and bimbo foods bakeries distribution
Victim entity
- Name
- Bimbo Bakeries USA, Inc., and Bimbo Foods Bakeries Distribution, LLCnorm: bimbo bakeries usa inc and bimbo foods bakeries distribution
Incident
- Discovered
- Feb 13, 2024
- Materiality determined
- —
- Notification sent
- Jun 6, 2024
- Affected individuals
- 16
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- providing notice of this incident to the affected New Hampshire residents by mailproviding notice of this incident to appropriate agencies in other jurisdictions
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 16 weeks(113 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.