HackingRetail & ConsumerManufacturingManufacturingCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTAUTHENTICATIONMediumContained
Old Dutch Foods
bd_b56fa7c9dfa52003 · schema v1 · pii pii-v1
Full breach record for Old Dutch Foods →Old Dutch Foods, Inc. (Roseville, MN) experienced an external system breach between October 16–17, 2024 in which unauthorized actors copied and exfiltrated files containing name, Social Security number, driver's license number, and financial account information. The breach was discovered on June 9, 2025 following a lengthy review of impacted systems. One Maine resident was notified on August 11, 2025. Twelve months of Experian credit monitoring were offered; federal law enforcement was notified.
Maine clockDiscovered Jun 9, 2025 → Filed with AG Aug 11, 202563d ⏱ ME AG >30d9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_4f5954a1046f9a0fNew Hampshire State AGfiled 2025-08-11Verified
- bd_a79246c58bd42e31Indiana State AGfiled 2025-08-11Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c0f6b4b4-b4a9-4a04-905d-5b3dcdf14037.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 11, 2025
- Raw hash
- 8c3be4d2fed8363661c1f99239ec06497291df62559d56ea6a032fb04b089067
Reporting entity
- Name
- Old Dutch Foodsnorm: old dutch foods
- Domain
- olddutchfoods.com
- Industry
- Other Commercial
Victim entity
- Name
- Old Dutch Foodsnorm: old dutch foods
- Domain
- olddutchfoods.com
- Industry
- Other Commercial
- Industry
- Retail & ConsumerllmManufacturingllm
Incident
- Discovered
- Jun 9, 2025
- Materiality determined
- —
- Notification sent
- Aug 11, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTAUTHENTICATION
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Provided written notice to Maine Attorney GeneralProvided written notice to relevant state regulators as necessaryNotified three major credit reporting agencies
Compliance
- Time to disclose
- 9 weeks(63 days from discovery to filing)
- Compliance flags
- ME AG >30d · 63dME resident >60d · 63d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 9, 2025→ Filed with AG: Aug 11, 202563d 30 days (soft) ME AG >30d Maine Discovered: Jun 9, 2025→ Notified: Aug 11, 202563d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.