Performance Food Group, Inc.
bd_f6539e066e667c53 · schema v1 · pii pii-v1
Full breach record for Performance Food Group, Inc. →3 incidents on filePerformance Food Group, Inc. reported an external system breach where an unauthorized individual compromised a company email account starting May 16, 2023, to send phishing emails. Discovered June 21, 2023, the incident affected 4,885 individuals, including 30 Maine residents. Data accessed included names, SSNs, DOBs, driver's licenses, financial account numbers, and health information. No evidence of data exfiltration or fraud was found. PFG engaged forensic investigators, locked out the attacker, and offered 12 months of credit monitoring via Kroll.
J jump to incidentP pin to compareR raw source
Incident timeline
May 16, 2023
Begins
Jun 21, 2023
Discovered
Feb 16, 2025
Filed
vs. sector median
+79 wks slower
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- Massachusetts State AGbd_ab9d320748f2ed242025-02-16Verified
- New Hampshire State AGbd_5955a604ae8917452024-12-12 · +66dVerified
- Vermont State AGbd_a15aa77ab105d1eb2024-12-12 · +66dVerified
- New Hampshire State AGbd_6648e714be0749aa2023-11-08 · +466dVerified
Show 2 more filings ↓Show fewer ↑up to 466d gap
- Indiana State AGbd_ad578b15381f44862023-11-08 · +466dVerified
- Vermont State AGbd_cb429c434650fad92023-11-08 · +466dCandidate
Filing propagation · 7 filings · 5 states
View merged incident ↗Pattern: first filing Nov 8 (NH), last Feb 16 (ME) — a 466-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.