Performance Food Group, Inc.
bd_a15aa77ab105d1eb · schema v1 · pii pii-v1
Full breach record for Performance Food Group, Inc. →3 incidents on filePerformance Food Group, Inc. notified Vermont AG that a phishing campaign compromised employee email accounts starting May 16, 2023. The attacker sent phishing emails, potentially accessing personal data including SSNs, DOBs, and health info. No data exfiltration was confirmed. Kroll provided identity monitoring to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
May 16, 2023
Begins
Jun 21, 2023
Discovered
Dec 12, 2024
Filed
vs. sector median
+70 wks slower
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- New Hampshire State AGbd_5955a604ae8917452024-12-12Verified
- Massachusetts State AGbd_ab9d320748f2ed242025-02-16 · +66dVerified
- Maine State AGbd_f6539e066e667c532025-02-16 · +66dVerified
- New Hampshire State AGbd_6648e714be0749aa2023-11-08 · +400dVerified
Show 2 more filings ↓Show fewer ↑up to 400d gap
- Indiana State AGbd_ad578b15381f44862023-11-08 · +400dVerified
- Vermont State AGbd_cb429c434650fad92023-11-08 · +400dCandidate
Filing propagation · 7 filings · 5 states
View merged incident ↗Pattern: first filing Nov 8 (NH), last Feb 16 (ME) — a 466-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.