HackingRetail & ConsumerRetailData ExfiltratedEmployee Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
Panera Bread Company
bd_dc1f326e520ca51a · schema v1 · pii pii-v1
Full breach record for Panera Bread Company →On March 23, 2024, Panera, LLC detected unauthorized access to internal files. A cybersecurity firm was engaged and law enforcement was notified. Investigation completed May 16, 2024 confirmed that names, Social Security Numbers, and potentially other employment-related information of 11 Maine residents were involved. Written notifications were mailed June 13, 2024. One year of credit monitoring and identity theft protection was offered via Epiq/CyEx Identity Defense Total.
Maine clockDiscovered May 16, 2024 → Filed with AG Jun 13, 202428d ✓ ME AG ≤30d28 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_1c5d97bc067117c1Montana State AGfiled 2024-06-13Candidate
- bd_5d1ae7fdc2815c45California State AGfiled 2024-06-13Verified
- bd_879dca8658048d03Indiana State AGfiled 2024-06-13Verified
- bd_8c1b2b55d3b5f830New Hampshire State AGfiled 2024-06-13Verified
Show 1 more filing ↓Show fewer ↑
- bd_b99c53d161d8fb93Washington State AGfiled 2024-06-13Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9366354d-de2c-468a-9e81-7fece7463aeb.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 13, 2024
- Raw hash
- 572b7363e08f35545969c6a16c05bb5f0110ae0980ae02d54f47ff7f0646d4cc
Reporting entity
- Name
- Panera Bread Companynorm: panera bread
- Domain
- panerabread.com
- Industry
- Other Commercial
Victim entity
- Name
- Panera Bread Companynorm: panera bread
- Domain
- panerabread.com
- Industry
- Other Commercial
- Industry
- Retail & Consumerllm
Incident
- Discovered
- May 16, 2024
- Materiality determined
- —
- Notification sent
- Jun 13, 2024
- Affected individuals
- 11
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Maine Attorney General
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 28d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 16, 2024→ Filed with AG: Jun 13, 202428d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.