HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedIdentity (basic)Government IDMediumContained

Elephants Food Group, Inc.

bd_96cad843b86afad1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 11, 2026

Filed

Mar 31, 2026

To disclose

7 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

66%

Full breach record for Elephants Food Group, Inc. →

Elephants Food Group, Inc. notified consumers of a data breach occurring between Jan 25 and Feb 11, 2026. Unauthorized access resulted in the copying of personal information, including names, addresses, and government IDs. The company engaged forensic specialists and legal counsel, and is offering 12 months of credit monitoring and fraud assistance to affected individuals.

J jump to incidentP pin to compareR raw source

Vermont clock⏱ VT AG >14 bday7 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 17 days

discovery → filing · 7 weeks / 48 days

Jan 25, 2026

Begins

Feb 11, 2026

Discovered

Mar 31, 2026

Filed

vs. sector median

1 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_60dbc930d34544412026-03-31Verified
Oregon State AGbd_98697f5f835003692026-03-31Candidate
Nebraska State AGbd_d37bb7d63b5d6faf2026-03-31Verified

Name: Elephants Food Group, Inc.
norm: elephants food

Name: Elephants Food Group, Inc.
norm: elephants food
Industry: Retail & Consumerllm

Discovered: Feb 11, 2026
Breach occurred: Jan 25, 2026 – Feb 11, 2026
Undetected for: 17 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 31, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Retained legal counsel and third-party forensic specialists to investigate the unusual activity
Providing notice to those whose information was potentially involved
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance to help with any questions that you might have or in event that you become a victim of fraud
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(48 days from discovery to filing)
Compliance flags: VT AG >14 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGMar 31 · first

Oregon State AGMar 31 · first

Nebraska State AGMar 31 · first

Vermont State AGMar 31 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2026-03-31-elephants-food-group-inc-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 31, 2026
Raw hash: 3f6518a597df01faecc144a03f6d853637eced4844cc4221740b0f740f98c3e9

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityElephants Food Group, Inc.

Victim entityElephants Food Group, Inc.

Incidentdiscovered Feb 11, 2026

Stated responseRetained legal counsel and third-party forensic specialists to investigate the unusual activity

ComplianceVT AG >14 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov