HackingEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
Sunsweet Growers Inc.
bd_6e1f9e832173155f · schema v1 · pii pii-v1
Full breach record for Sunsweet Growers Inc. →Sunsweet Growers Inc. notified California residents of a security incident discovered on December 11, 2024, where an unauthorized actor gained access to certain systems. The incident potentially exposed current and former employees' names, Social Security numbers, dates of birth, medical information, and insurance information. Sunsweet engaged third-party specialists, secured systems, and is offering 24 months of credit monitoring.
California clockDiscovered Dec 11, 2024 → Notified Apr 30, 2025140d ✗ CA 60-day late20 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-602082
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 30, 2025
- Raw hash
- 4faee618fb22faf16132aed64fc583953dba51d7f70a57c0860ff78013e72b1f
Reporting entity
- Name
- Sunsweet Growers Inc.norm: sunsweet growers
Victim entity
- Name
- Sunsweet Growers Inc.norm: sunsweet growers
Incident
- Discovered
- Dec 11, 2024
- Materiality determined
- —
- Notification sent
- Apr 30, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 20 weeks(140 days from discovery to filing)
- Compliance flags
- CA 60-day late · 140d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 11, 2024→ Notified: Apr 30, 2025140d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.