MisuseRetail & ConsumerRetailPrivilege AbuseEmployee Data InvolvedPIIGovernment IDFinancial accountMediumContained

E & J Gallo Winery

bd_8ae8e0c7a0493e02 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 30, 2017

Filed

Sep 15, 2017

To disclose

16 days

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for E & J Gallo Winery →3 incidents on file

E. & J. Gallo Winery notified Montana residents of a data breach involving a former employee who unauthorizedly obtained employee data on August 30, 2017. Affected data included names, SSNs, and financial account information. The company recovered the data, notified law enforcement, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 16 days

Aug 30, 2017

Discovered

Sep 15, 2017

Filed

vs. sector median

5 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_4b28de6a2a6a17442017-09-15Verified
California State AGbd_8a67bb2b9079a7902017-09-15Verified
Massachusetts State AGbd_b5d74016f624a2da2017-09-15Verified

Name: E & J Gallo Winery
norm: e j gallo winery
Domain: ejgallo.com

Name: E & J Gallo Winery
norm: e j gallo winery
Domain: ejgallo.com
Industry: Retail & Consumerllm

Discovered: Aug 30, 2017
Materiality determined: —
Notification sent: Sep 14, 2017
Affected individuals: 1state-resident count only
Data types: PIIGovernment IDFinancial account
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: Reported the matter to law enforcement authorities
Initial access: insider_action

During the incident: Contacted the former employee and recovered the data
Reported the matter to law enforcement authorities
Offered complimentary 12 month membership of Experian IdentityWorks Credit 3B
Enhanced the security of employee information
Changes made: Enhanced the security of employee information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 days(16 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGSep 15 · first

California State AGSep 15 · first

Massachusetts State AGSep 15 · first

Montana State AGSep 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/E-J-Gallo-Winery.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 15, 2017
Raw hash: 9d44883f1279a9b1a855993fc25163a0482423f49bbc6f92bc3eec0bfe8bb18f

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityE & J Gallo Winery

Victim entityE & J Gallo Winery

Incidentdiscovered Aug 30, 2017

Stated responseContacted the former employee and recovered the data

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov