Social EngineeringPhishingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Culinary Services of America Inc.
bd_cb17a4495790b003 · schema v1 · pii pii-v1
Full breach record for Culinary Services of America Inc. →Culinary Services of America Inc. disclosed a data breach on March 3, 2025, caused by a phishing email sent to an employee. An unauthorized actor gained access to personal information, including names and Social Security numbers. The company engaged outside specialists and legal counsel, and is providing credit monitoring and fraud assistance to affected individuals.
California clockDiscovered Mar 3, 2025 → Notified May 8, 202566d ✗ CA 60-day late9 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_a6a5d6a009266dbeIndiana State AGfiled 2025-05-08Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-602475
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 8, 2025
- Raw hash
- bf3e4720e484607d4f009fcc88f47550eb01e03636977d7553d2a4a8c2619cb4
Reporting entity
- Name
- Culinary Services of America Inc.norm: culinary services of america
Victim entity
- Name
- Culinary Services of America Inc.norm: culinary services of america
Incident
- Discovered
- Mar 3, 2025
- Materiality determined
- —
- Notification sent
- May 8, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566 Phishing
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 9 weeks(66 days from discovery to filing)
- Compliance flags
- CA 60-day late · 66d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 3, 2025→ Notified: May 8, 202566d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.