HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
MONDELEZ GLOBAL LLC
bd_a4506857adbf9ea7 · schema v1 · pii pii-v1
Full breach record for MONDELEZ GLOBAL LLC →Mondelez Global LLC reported an external system breach (hacking) occurring on February 23, 2023, discovered on May 22, 2023. The incident affected 51,110 individuals, including 203 Maine residents. Personal information compromised included names and Social Security Numbers. Mondelez provided written notification and offered 24 months of Experian IdentityWorks Credit Plus.
Maine clockDiscovered May 22, 2023 → Filed with AG Jun 15, 202324d ✓ ME AG ≤30d24 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_f49f3eaaf355d387Montana State AGfiled 2023-06-15Candidate
- bd_fac3e2b9089e310cNew Hampshire State AGfiled 2023-06-15Verified
- bd_b7de965a48342f55Oregon State AGfiled 2023-06-19(4d gap)Verified
- bd_820d6b50821eff43California State AGfiled 2023-06-20(5d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 5d gap
- bd_8fc3c30a7b89ff66Washington State AGfiled 2023-06-20(5d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/ca25f29f-db60-4baf-ba53-8bae79da4d97.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 15, 2023
- Raw hash
- 6779f815db30ad3cc7ccb0e846f1fbbfd50da59e484729b12c525c4a4d819ff2
Reporting entity
- Name
- MONDELEZ GLOBAL LLCnorm: mondelez global
Victim entity
- Name
- MONDELEZ GLOBAL LLCnorm: mondelez global
Incident
- Discovered
- May 22, 2023
- Materiality determined
- —
- Notification sent
- Jun 15, 2023
- Affected individuals
- 51,110
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 24 days(24 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 24d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 22, 2023→ Filed with AG: Jun 15, 202324d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.