DisclosureLens
Social EngineeringRetail & ConsumerRetailPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Five Guys Holdings, Inc.

bd_956df4f5240be8cc · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 6, 2018

Filed

Nov 2, 2018

To disclose

13 weeks

Affected

1state residents only

Linked

5 filings

Confidence

66%
Full breach record for Five Guys Holdings, Inc.5 incidents on file

Five Guys Enterprises, LLC notified Montana residents that on August 6, 2018, an employee fell victim to a phishing email, leading to unauthorized access of their email account. The attacker accessed personal information including names, SSNs, dates of birth, and financial data for employees and vendors. Five Guys secured the account, engaged forensic investigators, and offered one year of Experian IdentityWorks.

Incident timeline

discovery → filing · 13 weeks / 88 days

Aug 6, 2018

Discovered

Nov 2, 2018

Filed

vs. sector median

+5 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 3 states

View merged incident ↗
California State AGNov 2 · first
Montana State AGNov 2 · first · this page

Pattern: first filing Nov 2 (CA), last Dec 3 (NH) — a 31-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.