MisuseRetail & ConsumerRetailPrivilege AbuseEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHighContained

E & J Gallo Winery

bd_8a67bb2b9079a790 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 30, 2017

Filed

Sep 15, 2017

To disclose

16 days

Affected

6,792state residents only

Linked

4 filings

Confidence

66%

Full breach record for E & J Gallo Winery →3 incidents on file

E. & J. Gallo Winery reported that a former employee obtained employee data without authorization on August 18, 2017. The company discovered the incident on August 30, 2017, immediately recovered the data, and reported it to law enforcement. Approximately 6,792 California residents were affected, with potential exposure of names, Social Security numbers, and financial account information. The company offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 12 days

discovery → filing · 16 days

Aug 18, 2017

Begins

Aug 30, 2017

Discovered

Sep 15, 2017

Filed

vs. sector median

5 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_4b28de6a2a6a17442017-09-15Verified
Montana State AGbd_8ae8e0c7a0493e022017-09-15Candidate
Massachusetts State AGbd_b5d74016f624a2da2017-09-15Verified

Name: E & J Gallo Winery
norm: e j gallo winery
Domain: ejgallo.com

Name: E & J Gallo Winery
norm: e j gallo winery
Domain: ejgallo.com
Industry: Retail & Consumerllm

Discovered: Aug 30, 2017
Breach occurred: Aug 18, 2017
Undetected for: 12 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 6,792state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Insider
Threat actor: Internal
Regulator citations: Submitted the California Data Security Breach online formNotified the California Attorney General
Initial access: insider_action

During the incident: Immediately contacted the person and recovered the data
Reported the matter to law enforcement authorities
Providing 12 months of complementary credit monitoring and identity monitoring services to the affected residents through Experian
Taken steps to enhance the security of our employee information
Changes made: Taken steps to enhance the security of our employee information in order to prevent similar incidents from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 days(16 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGSep 15 · first

Montana State AGSep 15 · first

Massachusetts State AGSep 15 · first

California State AGSep 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-101919
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 15, 2017
Raw hash: 77c31bb0e71c96d987cfdbe6395b15969953eed8dab787bfac265e5f5cb19fe7

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityE & J Gallo Winery

Victim entityE & J Gallo Winery

Incidentdiscovered Aug 30, 2017

Stated responseImmediately contacted the person and recovered the data

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov