Performance Food Group, Inc.
ent_019dea4be5bac4764e07e5bfd0f4f37e
Disclosures
5
State AG · 4 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
4,885
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Performance Food Group, Inc.
- Normalized
- performance food— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300OMUOGBYK0FFO76
- SEC EDGAR CIK
- 0001618673
- Domain
- pfgc.com
Disclosure history (5)newest first
- 🦞Maine State AGas victim2025-02-16
PFG email account compromised May 16, 2023; unauthorized individual sent phishing emails and accessed several accounts. Discovered June 21, 2023. 30 Maine residents affected (4,885 total). Exposed data may include SSNs, DOB, financial account info, driver's license numbers, and health/treatment info. No evidence of exfiltration or fraud. Notifications sent Nov 8, 2023 and Dec 12, 2024.
- 🍁Vermont State AGas victim2024-12-12
Performance Food Group, Inc. notified Vermont AG that a phishing campaign compromised employee email accounts starting May 16, 2023. The attacker sent phishing emails, potentially accessing personal data including SSNs, DOBs, and health info. No data exfiltration was confirmed. Kroll provided identity monitoring to affected individuals.
- ⛰️New Hampshire State AGas victim2023-11-08
Performance Food Group, Inc. (PFG) reported a data breach to the New Hampshire Attorney General on November 8, 2023. PFG discovered unauthorized access to its systems on June 21, 2023, involving compromised employee email accounts. The unauthorized actor accessed the accounts starting May 16, 2023. The breach exposed sensitive personal information, including names, addresses, and potentially other PII, belonging to an undetermined number of individuals. PFG engaged forensic investigators, notified law enforcement, and sent notification letters to affected individuals.
- 🏎️Indiana State AGas victim2023-11-08
Performance Food Group Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-16 and was reported on 2023-11-08. 26 Indiana residents were affected. 4,885 individuals affected in total.
- 🍁Vermont State AGas victim2023-11-08
Performance Food Group, Inc. notified consumers of a data breach where an email account was compromised via phishing starting May 16, 2023. Unauthorized access was discovered June 21, 2023. No data exfiltration was confirmed, but personal information was potentially accessed. PFG engaged forensic investigators and offered 12 months of identity monitoring via Kroll.