Social EngineeringManufacturingManufacturingPhishingStolen CredentialsCustomer Data InvolvedIdentity (basic)CredentialsLowContained

Miyoshi America, Inc.

bd_82975a58e1446211 · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 7, 2023

Filed

May 4, 2023

To disclose

8 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

65%

Full breach record for Miyoshi America, Inc. →

Miyoshi America experienced unauthorized access to an employee email account starting March 7, 2023, likely via phishing. The incident involved access to customer data including names and other identifiers. The company secured the account, investigated the scope, and offered 24 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 58 days

Mar 7, 2023

Discovered

Apr 21, 2023

Scope determined

May 4, 2023

Filed

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_408dfda70cd754ad2023-05-04Candidate
Massachusetts State AGbd_e58ae7f234cf89e62023-05-04Verified

Name: Miyoshi America, Inc.
norm: miyoshi america
Domain: miyoshiamerica.com

Name: Miyoshi America, Inc.
norm: miyoshi america
Domain: miyoshiamerica.com
Industry: Manufacturingllm

Discovered: Mar 7, 2023
Materiality determined: Apr 21, 2023
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Credentials
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Took immediate action to address and investigate the incident
Conducted an investigation in order to determine the nature and scope of the incident
Secured the email account
Undertook a thorough investigation
Implemented additional technical safeguards
Offering you complimentary credit monitoring and identity protection services
Changes made: Implemented additional technical safeguards to further enhance the security of information in our possession and to prevent similar incidents from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGMay 4 · first

Massachusetts State AGMay 4 · first

New Hampshire State AGMay 4 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/miyoshi-america-20230504.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 4, 2023
Raw hash: 4a53be12db3c5136189e3f014cace347a1c30c484d929c09534f8b318bd98c43

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMiyoshi America, Inc.

Victim entityMiyoshi America, Inc.

Incidentdiscovered Mar 7, 2023

Stated responseTook immediate action to address and investigate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov