HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
SONNY'S ENTERPRISES, LLC
bd_9069fa5b7b91758c · schema v1 · pii pii-v1
Full breach record for SONNY'S ENTERPRISES, LLC →Sonny's Enterprises LLC, a Florida-based commercial entity, reported an external system breach (hacking) occurring on June 19, 2023, discovered on August 3, 2023. The incident compromised the names and Social Security Numbers of 4,280 individuals, including 2 Maine residents. The entity provided written notification on September 1, 2023, and offered 24 months of credit monitoring and identity theft recovery services through IDX.
Maine clockDiscovered Aug 3, 2023 → Filed with AG Aug 29, 202326d ✓ ME AG ≤30d26 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_f376cb59dee0198fNew Hampshire State AGfiled 2023-08-31(2d gap)Verified
- bd_3e7216da4b9546e8Vermont State AGfiled 2023-09-01(3d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c71ef086-0eb0-4468-9f9c-497e2065fe60.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 29, 2023
- Raw hash
- dc33aed6f505b03d98c91e105b68ff3fb93be0149bc3225e29c77bd929c772ca
Reporting entity
- Name
- SONNY'S ENTERPRISES, LLCnorm: sonny s
Victim entity
- Name
- SONNY'S ENTERPRISES, LLCnorm: sonny s
Incident
- Discovered
- Aug 3, 2023
- Materiality determined
- —
- Notification sent
- Sep 1, 2023
- Affected individuals
- 4,280
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 26 days(26 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 26d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 3, 2023→ Filed with AG: Aug 29, 202326d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.