HackingVulnerability ExploitCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
KING ARTHUR BAKING COMPANY, INC.
bd_a81c43600fd30f89 · schema v1 · pii pii-v1
Full breach record for KING ARTHUR BAKING COMPANY, INC. →King Arthur Baking Company, Inc. reported an external system breach (hacking) occurring on June 23, 2023, discovered on July 11, 2023. The incident affected 828 individuals, including 5 Maine residents. Acquired data included names and Social Security Numbers. The company provided written notification and offered 24 months of credit monitoring and identity restoration services through Experian.
Maine clockDiscovered Jul 11, 2023 → Filed with AG Jul 20, 20239d ✓ ME AG ≤30d9 days discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_3c725de068f258a0Montana State AGfiled 2023-07-20Candidate
- bd_51b2400c64c309ffNew Hampshire State AGfiled 2023-07-20Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bbdc21c9-2ccb-4a8a-80c6-801a507f3de9.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 20, 2023
- Raw hash
- 90536a7d738d0890e3309b184b539d6f25bcb0495a9aa3d5f493ae619a6c5783
Reporting entity
- Name
- KING ARTHUR BAKING COMPANY, INC.norm: king arthur baking
Victim entity
- Name
- KING ARTHUR BAKING COMPANY, INC.norm: king arthur baking
Incident
- Discovered
- Jul 11, 2023
- Materiality determined
- —
- Notification sent
- Jul 20, 2023
- Affected individuals
- 828
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 days(9 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 9d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 11, 2023→ Filed with AG: Jul 20, 20239d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.