HackingEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICEMPLOYMENTMediumContained
Refresco Beverages U.S. Inc.
bd_f6d8a1941f56a0ef · schema v1 · pii pii-v1
Full breach record for Refresco Beverages U.S. Inc. →Refresco Beverages US Inc. disclosed a cyber incident involving unauthorized third-party access to its North American network systems, discovered on May 14, 2023. The breach potentially impacted personally identifiable information of current or former employees and their dependents, including names, SSNs, financial account numbers, and health information related to workers' compensation. The company engaged forensic investigators, restored network functionality, and is providing two years of credit monitoring and identity theft protection services to affected individuals.
California clockDiscovered May 14, 2023 → Notified Nov 9, 2023179d ✗ CA 60-day late26 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_eae7308d9f937619Maine State AGfiled 2023-11-09Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-576341
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 9, 2023
- Raw hash
- cc099fa006d1c8846ec545bc006965556a90219b51912dc9bd8d07f64d34c6fa
Reporting entity
- Name
- Refresco Beverages U.S. Inc.norm: refresco beverages us
Victim entity
- Name
- Refresco Beverages U.S. Inc.norm: refresco beverages us
Incident
- Discovered
- May 14, 2023
- Materiality determined
- —
- Notification sent
- Nov 9, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICEMPLOYMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
- Regulator citations
- Notified the appropriate state regulatory authorities
Compliance
- Time to disclose
- 26 weeks(179 days from discovery to filing)
- Compliance flags
- CA 60-day late · 179d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 14, 2023→ Notified: Nov 9, 2023179d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.