DisclosureLens
HackingRetail & ConsumerRetailCustomer Data InvolvedIdentity (basic)LowContained

Albertsons Companies, Inc.

bd_fb71181e1f37bf75 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 14, 2025

Filed

Dec 18, 2025

To disclose

22 weeks

Affected

515state residents only

Linked

3 records

Confidence

70%
Full breach record for Albertsons Companies, Inc. →4 incidents on file

Albertsons Companies, Inc. reported a data breach in Washington affecting 515 residents. Unauthorized access to a CRM application occurred between July 14-21, 2025. Personal data (name, address, DOB) was potentially exposed. Albertsons detected the incident on July 14, 2025, and notified affected individuals on December 18, 2025, offering 12 months of credit monitoring.

Washington clock✗ WA AG >90d22 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 22 weeks / 157 days

Jul 14, 2025

Begins

Jul 14, 2025

Discovered

Dec 18, 2025

Filed

vs. sector median

+13 wks slower

This filing is one of 3 records about the same incident.View merged incident
A leak claim by shinyhunters about this victim was first seen 76 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.