DisclosureLens
HackingIdentity (basic)CredentialsLowContained

Speedway LLC

bd_fa1b260ef09dc93b · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 17, 2023

Filed

May 16, 2023

To disclose

29 days

Affected

1state residents only

Linked

6 filings

Confidence

66%
Full breach record for Speedway LLC2 incidents on file

Speedway LLC notified customers of a security incident where unknown parties attempted to access Speedy Rewards accounts via brute force or credential stuffing starting April 11, 2023. Unauthorized access was detected on April 17, 2023. Affected data included names, emails, points balances, and passcodes. Speedway engaged forensic experts, reset passwords, and refunded points.

Incident timeline

undetected · 6 days
discovery → filing · 29 days

Apr 11, 2023

Begins

Apr 17, 2023

Discovered

May 16, 2023

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing

Filing propagation · 6 filings · 6 states

View merged incident ↗
Massachusetts State AGMay 16 · first
Vermont State AGMay 16 · first
New Hampshire State AGMay 16 · first
Indiana State AGMay 16 · first
Maine State AGMay 16 · first
Montana State AGMay 16 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.