HackingCustomer Data InvolvedIDENTITY_BASICLowContained
San Francisco-Marin Food Bank
bd_7183b8ddd977ea52 · schema v1 · pii pii-v1
Full breach record for San Francisco-Marin Food Bank →San Francisco-Marin Food Bank experienced unauthorized access to its network between May 10 and May 30, 2024. The organization discovered the incident on May 31, 2024. Affected data may include names and other personal information. The organization conducted an investigation, notified law enforcement, changed network passwords, and is offering free credit monitoring and identity protection services to affected individuals.
California clockDiscovered May 31, 2024 → Notified Feb 4, 2025249d ✗ CA 60-day late36 weeks discovery → filing
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_09b786d3bc478ad0Maine State AGfiled 2025-02-04Candidate
- bd_1c731ccdeafe69f3Maryland State AGfiled 2025-02-04Verified
- bd_6eab367fa6ba89b7Indiana State AGfiled 2025-02-04Verified
- bd_7247ef99c41591f3Montana State AGfiled 2025-02-04Verified
Show 2 more filings ↓Show fewer ↑
- bd_af4270794a83ef02New Hampshire State AGfiled 2025-02-04Verified
- bd_bd39b98a0b0b97acVermont State AGfiled 2025-02-04Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-598255
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 4, 2025
- Raw hash
- ef6060b72ecbaac6349d81cc2741f7aba35755066bcbbee86350231c8ae8965c
Reporting entity
- Name
- San Francisco-Marin Food Banknorm: san francisco marin food bank
- Domain
- sfmfoodbank.org
Victim entity
- Name
- San Francisco-Marin Food Banknorm: san francisco marin food bank
- Domain
- sfmfoodbank.org
Incident
- Discovered
- May 31, 2024
- Materiality determined
- —
- Notification sent
- Feb 4, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unknown
Compliance
- Time to disclose
- 36 weeks(249 days from discovery to filing)
- Compliance flags
- CA 60-day late · 249d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 31, 2024→ Notified: Feb 4, 2025249d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.