HackingRetail & ConsumerRetailCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Mile Hi Foods Company

bd_bdc7b63b8fd6d4b6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 13, 2024

Filed

Oct 22, 2024

To disclose

6 weeks

Affected

9state residents only

Linked

4 filings

Confidence

65%

Mile Hi Foods Company notified Montana residents of a data security incident discovered on September 13, 2024, involving unauthorized access to files containing names and Social Security numbers. The company engaged cybersecurity specialists, notified the FBI, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d6 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 6 weeks / 39 days

Sep 13, 2024

Begins

Sep 13, 2024

Discovered

Oct 22, 2024

Filed

vs. sector median

2 wks faster

This filing is one of 4 about the same incident.View merged incident

A leak claim by play about this victim predates this filing by 59 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_516476f662a2c7052024-08-24 · +59dVerified by operator

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_54655a52535ab66b2024-10-22Verified by operator
Massachusetts State AGbd_a4e4f278f38233052024-10-23 · +1dVerified by operator

Name: Mile Hi Foods Company
norm: mile hi foods
Domain: milehicompanies.com

Name: Mile Hi Foods Company
norm: mile hi foods
Domain: milehicompanies.com
Industry: Retail & Consumerllm

Discovered: Sep 13, 2024
Breach occurred: Sep 13, 2024
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 22, 2024
Affected individuals: 9state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the Federal Bureau of Investigation

During the incident: Engaged cybersecurity specialists to assist with the process
Undertook a comprehensive review of those files
Notified the Federal Bureau of Investigation
Offering a complimentary ##-month membership of Experian’s IdentityWorks
Changes made: Implemented measures to enhance security and minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(39 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGOct 22 · first

Montana State AGOct 22 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1778.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 22, 2024
Raw hash: 32feb833914164c0fcc9abb1202ac3bd58c83cd0d93810c3f12402cfa0f5d0f4

Linked disclosures

Ransomware claims (1)

Regulatory filings (2) · sorted by filing gap

Reporting entityMile Hi Foods Company

Victim entityMile Hi Foods Company

Incidentdiscovered Sep 13, 2024

Stated responseEngaged cybersecurity specialists to assist with the process

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancedojmt.gov