HackingManufacturingManufacturingEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)EmploymentMediumContained

Refresco Beverages U.S. Inc.

bd_f6d8a1941f56a0ef · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 14, 2023

Filed

Nov 9, 2023

To disclose

26 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

65%

Full breach record for Refresco Beverages U.S. Inc. →

Refresco Beverages US Inc. disclosed a cyber incident involving unauthorized third-party access to its North American network systems, discovered on May 14, 2023. The breach potentially impacted personally identifiable information of current or former employees and their dependents, including names, SSNs, financial account numbers, and health information related to workers' compensation. The company engaged forensic investigators, restored network functionality, and is providing two years of credit monitoring and identity theft protection services to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered May 14, 2023 → Notified Nov 9, 2023179d ✗ CA 60-day late26 weeks discovery → filing

Incident timeline

discovery → filing · 26 weeks / 179 days

May 14, 2023

Begins

May 14, 2023

Discovered

Nov 9, 2023

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_eae7308d9f9376192023-11-09Candidate
New Hampshire State AGbd_8825251616675c392023-11-14 · +5dVerified
Massachusetts State AGbd_4689d36ec450d1022023-11-15 · +6dVerified

Name: Refresco Beverages U.S. Inc.
norm: refresco beverages us

Name: Refresco Beverages U.S. Inc.
norm: refresco beverages us
Industry: Manufacturingllm

Discovered: May 14, 2023
Breach occurred: May 14, 2023 – May 14, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 9, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)Employment
Attack vector: Unauthorized Access
Threat actor: External
Regulator citations: Notified the appropriate state regulatory authorities

During the incident: Brought in a top cybersecurity investigation firm and experienced legal counsel to conduct a comprehensive investigation
Restored full functionality of its North American network and operations within a week
Conducted a manual review of a large volume of data by an experienced and industry leading outside vendor
Implemented additional hardware and software security protections and protocols to ensure that your personal information is protected from unauthorized access
Notified law enforcement of this incident
Notified the appropriate state regulatory authorities
Covering the cost for two years for you to receive credit monitoring with all three credit bureaus through Cyberscout, a TransUnion company
Providing proactive fraud assistance, identity theft and fraud resolution services through IdentityForce, a TransUnion company
Changes made: Implemented additional hardware and software security protections and protocols to ensure that your personal information is protected from unauthorized access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(179 days from discovery to filing)
Compliance flags: CA 60-day late · 179d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: May 14, 2023
→ Notified: Nov 9, 2023
179d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: May 14, 2023 → Notified: Nov 9, 2023	179d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGNov 9 · first

California State AGNov 9 · first · this page

New Hampshire State AG+5d

Massachusetts State AG+6d

Pattern: first filing Nov 9 (ME), last Nov 15 (MA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-576341
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 9, 2023
Raw hash: cc099fa006d1c8846ec545bc006965556a90219b51912dc9bd8d07f64d34c6fa

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityRefresco Beverages U.S. Inc.

Victim entityRefresco Beverages U.S. Inc.

Incidentdiscovered May 14, 2023

Stated responseBrought in a top cybersecurity investigation firm and experienced legal counsel to conduct a comprehensive investigation

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov