HackingRetail & ConsumerRetailCustomer Data InvolvedData ExfiltratedDelayed DiscoveryPIILowContained
Berkot’s Super Foods
bd_cce4e47a2b37ad92 · schema v1 · pii pii-v1
Full breach record for Berkot’s Super Foods →Berkot's Super Foods, a grocery retailer based in New Lenox, IL, experienced an external system breach (hacking) with unusual network activity discovered on December 1, 2024, and breach awareness on June 16, 2025. The incident occurred on November 22, 2024 and may have resulted in unauthorized acquisition of personal information. 11,090 total individuals were affected, including 2 Maine residents. IDX identity protection services were offered for 12 months.
Leak gap clock✗ Leak >180d14 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
A leak claim by abyss about this victim predates this filing by 211 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_687b8c4b9bb7e6d1Leak Siteabyssfiled 2024-12-01(211d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/84264b1a-c62b-4721-b403-a2cf463613bf.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 30, 2025
- Raw hash
- 0fe1368acddd679fe78119d00221f341206a526b8dff16d1d835ed06a19a1114
Reporting entity
- Name
- Berkot’s Super Foodsnorm: berkot s super foods
- Domain
- berkotfoods.com
- Industry
- Other Commercial
Victim entity
- Name
- Berkot’s Super Foodsnorm: berkot s super foods
- Domain
- berkotfoods.com
- Industry
- Other Commercial
- Industry
- Retail & Consumerllm
Incident
- Discovered
- Jun 16, 2025
- Materiality determined
- —
- Notification sent
- Jun 26, 2025
- Affected individuals
- 2
- Data types
- PII
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Maine Attorney General notified
Compliance
- Time to disclose
- 14 days(14 days from discovery to filing)
- Compliance flags
- Leak >180dME AG ≤30d · 14d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 16, 2025→ Filed with AG: Jun 30, 202514d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.