HackingRetail & ConsumerRetailStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)LowContained

SYSCO CORPORATION

bd_c7ee31b12cac24bd · schema v1 · pii pii-v2

Severity

Low

Discovered

Apr 23, 2026

Filed

Jul 22, 2026

To disclose

—

Affected

Not disclosed

Linked

5 records

Confidence

66%

Full breach record for SYSCO CORPORATION →3 incidents on file

Sysco Corporation notified Nebraska residents of a cybersecurity incident discovered on April 23, 2026. An unauthorized third party accessed files containing names and additional personal information. Sysco contained the breach, notified law enforcement, engaged forensic experts, and offered 24 months of identity theft protection via Experian. Notification letters were sent on July 22, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 23, 2026

Discovered

Jul 22, 2026

Filed

This filing is one of 5 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteshinyhuntersbd_12310878e1176f5f2026-06-15 · +37dVerified by operator

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_7986c0047780e18c2026-07-22Candidate
Vermont State AGbd_6b0cd8df70a260e62026-07-28 · +6dVerified
Massachusetts State AGbd_b72f0bbe264673442026-07-28 · +6dVerified

Name: SYSCO CORPORATION
norm: sysco
Domain: sysco.com

Name: SYSCO CORPORATION
norm: sysco
Domain: sysco.com
Industry: Retail & Consumerllm

Discovered: Apr 23, 2026
Materiality determined: —
Notification sent: Jul 22, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated CollectionT1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Disrupting data exfiltration channels and removing the unauthorized third party’s ability to access Sysco’s environment
Notified law enforcement
Engaged a leading cybersecurity firm and other experts to assist with the investigation
Enhanced its cybersecurity monitoring and detection capabilities
Changes made: Enhanced its cybersecurity monitoring and detection capabilities
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGJul 22 · first

Nebraska State AGJul 22 · first · this page

Vermont State AG+6d

Massachusetts State AG+6d

Pattern: first filing Jul 22 (IN), last Jul 28 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/6edead40-aa25-4412-8798-17cdf16539ce.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 22, 2026
Raw hash: b46f18c8efa31ef6faf24acc9b7b68e3dbb3c42b570e019081f6fc856fa372ae

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entitySYSCO CORPORATION

Victim entitySYSCO CORPORATION

Incidentdiscovered Apr 23, 2026

Stated responseDisrupting data exfiltration channels and removing the unauthorized third party’s ability to access Sysco’s environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov