HackingStolen CredentialsCustomer Data InvolvedFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Speedway LLC
bd_ed862421c0e8be78 · schema v1 · pii pii-v1
Full breach record for Speedway LLC →Speedway LLC reported a credential stuffing attack that affected the rewards accounts of 3 Maine residents. The breach occurred on April 11, 2023, and was discovered on April 17, 2023. The compromised information included financial account numbers or credit/debit card numbers along with their access codes. Customers were notified on May 16, 2023.
Maine clockDiscovered Apr 17, 2023 → Filed with AG May 16, 202329d ✓ ME AG ≤30d29 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2957f011b558d0bdVermont State AGfiled 2023-05-16Verified
- bd_5fef8f8c03ef0226New Hampshire State AGfiled 2023-05-16Verified
- bd_fa1b260ef09dc93bMontana State AGfiled 2023-05-16Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5d8bcf20-cdfd-431a-818f-d40ca2fae7c6.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 16, 2023
- Raw hash
- 3cf010784c534075d7c32e5eb331f614532e75bdcb4b91b6079d26507ecb7d1f
Reporting entity
- Name
- Speedway LLCnorm: speedway
Victim entity
- Name
- Speedway LLCnorm: speedway
Incident
- Discovered
- Apr 17, 2023
- Materiality determined
- —
- Notification sent
- May 16, 2023
- Affected individuals
- 3
- Data types
- FINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 29d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 17, 2023→ Filed with AG: May 16, 202329d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.