Albertsons Companies, Inc.
ent_019de1a81e8064c9d90402566eb84bbf
Disclosures
18
State AG · Leak Site · 10 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
32,878
nationwide · State AG OR
Leak-site claims
2
unverified actor claims
Identity resolution
- Canonical name
- Albertsons Companies, Inc.
- Normalized
- albertsons companies— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300YKWOC0AOR16R51
- SEC EDGAR CIK
- 0001646972
- Domain
- albertsonscompanies.com
Disclosure history (18)newest first
- Washington State AGas victim2025-12-18
Albertsons Companies, Inc. reported a data breach in Washington affecting 515 residents. Unauthorized access to a CRM application occurred between July 14-21, 2025. Personal data (name, address, DOB) was potentially exposed. Albertsons detected the incident on July 14, 2025, and notified affected individuals on December 18, 2025, offering 12 months of credit monitoring.
- GLOBALLeak Siteas victim2025-10-11
Albertsons Companies, Inc. is one of the largest food and drug retailers in the United States, serving millions of customers each week. The company operates stores across 35 states and the District of Columbia under 20 leading banners including Albertsons, Safeway, Vons, and Jewel-Osco. In addition to its retail operations, Albertsons also has a health and wellness business and a private brand portfolio.
- GLOBALLeak Siteas victim2025-07-14
Albertsons Companies Inc. is one of the largest American grocery corporations, founded by Joe Albertson in 1939. It operates stores across 34 states under 20 well-known banners including Albertsons, Safeway, Vons, Jewel-Osco, Shaw’s, Acme, Tom Thumb, Randalls, United Supermarkets, Pavilions, Star Market, and Carrs. It remains a leader in the supermarket industry, offering grocery products, pharmacy services, and specialty food products.
- Montana State AGas victim2024-02-09
Albertsons Companies, Inc. notified Montana residents of a phishing incident where associates' login credentials were stolen via deceptive domains mimicking the myACI HR system. Unauthorized access occurred between Dec 19, 2023, and Jan 12, 2024. Affected data included names, SSNs, DOBs, and bank details. Albertsons engaged forensic investigators and offered credit monitoring.
- Maine State AGas victim2024-02-09
Albertsons Companies, Inc. reported a data breach impacting 4 Maine residents which occurred between December 19, 2023, and January 12, 2024. The breach was discovered on January 10, 2024, and involved a fraudulent website leading to credential theft. The compromised information included names and Social Security numbers. The company has offered 24 months of credit monitoring and identity theft protection services through IDX to affected individuals.
- Indiana State AGas victim2024-02-09
Albertsons Companies, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-12-19 and was reported on 2024-02-09. 2 Indiana residents were affected. 457 individuals affected in total.
- New Hampshire State AGas victim2024-02-09
Albertsons Companies, Inc. notified the New Hampshire Attorney General of a phishing incident where associates entered login credentials into deceptive domains mimicking the myACI HR system. Unauthorized access occurred between Dec 19, 2023, and Jan 12, 2024. Albertsons discovered the breach on Dec 29, 2023, and notified 6 NH residents on Feb 9, 2024. Personal data potentially involved includes names, addresses, and government IDs. Remediation included forensic investigation, shutting down deceptive domains, and offering credit monitoring.
- Massachusetts State AGas victim2024-02-09
Albertsons Companies, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-02-09. 18 Massachusetts residents were affected.
- Oregon State AGas victim2023-04-21
Albertsons Companies, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2023-04-21. The breach occurred during 12/22/2022 - 12/24/2022. The breach was discovered on 3/24/2023. 32,878 individuals were affected. Notice was sent on 4/21/2023.
- Indiana State AGas victim2023-04-21
Albertsons Companies Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2022-12-22 and was reported on 2023-04-21. 159 Indiana residents were affected. 32,878 individuals affected in total.
- Massachusetts State AGas victim2023-04-21
Albertsons Companies, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-04-21. 187 Massachusetts residents were affected. The report records the breach type as electronic.
- Montana State AGas victim2023-04-21
Albertsons Companies, Inc. notified Montana residents of a data breach where unauthorized access occurred Dec 22-24, 2022, involving malware infection and data exfiltration from file servers. Personal information including names was accessed. Albertsons engaged forensic investigators and law enforcement, and offered credit monitoring.
- Maine State AGas victim2023-04-21
Albertsons Companies, Inc. reported a data breach affecting 32,878 individuals, which occurred from December 22, 2022, to December 24, 2022. The breach was discovered on March 24, 2023. The cause was an external system breach (hacking), and compromised information included names and driver's license or non-driver identification card numbers. Affected individuals were notified in writing on April 21, 2023, and offered 12 months of credit monitoring and identity theft protection services.
- New Hampshire State AGas victim2023-04-21
Albertsons Companies, Inc. notified the NH AG of a data security incident discovered Dec 23, 2022. Unauthorized access occurred Dec 22-24, 2022, infecting systems with malware and exfiltrating personal information from file servers. 58 NH residents were notified on April 21, 2023. Affected data likely included names, SSNs, and DOBs. Albertsons engaged forensic investigators and law enforcement, and offered credit monitoring.
- California State AGas victim2023-04-20
Albertsons Companies, Inc. reported a data security incident where an unauthorized third party gained access to systems and infected them with malware between December 22-24, 2022. The actor accessed and removed copies of data from file servers. Affected individuals may have had their names and other personal information exposed. Albertsons engaged forensics, contacted law enforcement, and offered credit monitoring.
- Washington State AGas victim2023-04-20
Albertsons Companies, Inc. reported a ransomware incident in Washington affecting 1,882 residents. Unauthorized access occurred Dec 22-24, 2022, discovered Dec 23, 2022. Personal info (names) accessed. Notifications sent April 21, 2023. Forensic investigation and law enforcement notification occurred.
- Vermont State AGas victim2023-04-13
Albertsons Companies, Inc. notified consumers of a data breach occurring December 22-24, 2022. An unauthorized third party gained access to systems, infected them with malware, and exfiltrated personal information including names and variable data. Albertsons engaged forensic investigators and law enforcement, and offered credit monitoring to affected individuals.
- Massachusetts State AGas victim2018-04-13
Albertsons Companies Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-04-13. 5 Massachusetts residents were affected. The report records the breach type as electronic.