Speedway LLC
bd_fa1b260ef09dc93b · schema v1 · pii pii-v1
All records for Speedway LLC →2 incidents on fileAccount takeover notice
Speedway LLC notified customers of unauthorized access to their accounts. The filing says: “Note also that they used your email address and passcode, most likely obtained from another source where you used the same passcode or by guessing the code.”
Speedway LLC notified customers of a security incident where unknown parties attempted to access Speedy Rewards accounts via brute force or credential stuffing starting April 11, 2023. Unauthorized access was detected on April 17, 2023. Affected data included names, emails, points balances, and passcodes. Speedway engaged forensic experts, reset passwords, and refunded points.
J jump to incidentP pin to compareR raw source
Incident timeline
Apr 11, 2023
Begins
Apr 17, 2023
Discovered
May 16, 2023
Filed
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Massachusetts State AGbd_18b558d719b181192023-05-16Verified
- Vermont State AGbd_2957f011b558d0bd2023-05-16Verified
- New Hampshire State AGbd_5fef8f8c03ef02262023-05-16Verified
- Indiana State AGbd_676831c602e20aad2023-05-16Verified
Show 1 more filing ↓Show fewer ↑
- Maine State AGbd_ed862421c0e8be782023-05-16Candidate
Filing propagation · 6 filings · 6 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.