HackingManufacturingRetail & ConsumerManufacturingCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIILowContained
ALPHA BAKING CO., INC.
bd_b2913964ae8fdb18 · schema v1 · pii pii-v1
Full breach record for ALPHA BAKING CO., INC. →Alpha Baking Co., Inc. reported an external system breach (hacking) in which an unauthorized third party obtained files stored on the company network. Unusual activity was identified on January 23, 2025; a forensic review was completed on May 2, 2025. The breach affected 21,463 individuals total and 1 Maine resident. Affected data included personal information. Kroll 12-month identity monitoring services were offered to affected individuals.
Maine clockDiscovered May 22, 2025 → Filed with AG Jun 13, 202522d ✓ ME AG ≤30d22 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_7a56f63abfc2c9a0Indiana State AGfiled 2025-06-13Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/28c4bef7-98fb-460b-90ef-18caa49b59b1.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 13, 2025
- Raw hash
- 132dfbed489c7f95bb54761a279ec89ab1156ec79b54c5abcf82a7a6f2275096
Reporting entity
- Name
- ALPHA BAKING CO., INC.norm: alpha baking
- Industry
- Other Commercial
Victim entity
- Name
- ALPHA BAKING CO., INC.norm: alpha baking
- Industry
- Other Commercial
- Industry
- ManufacturingllmRetail & Consumerllm
Incident
- Discovered
- May 22, 2025
- Materiality determined
- May 2, 2025
- Notification sent
- May 13, 2025
- Affected individuals
- 1
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1213 Data from Information RepositoriesT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 22 days(22 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 22d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 22, 2025→ Filed with AG: Jun 13, 202522d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.