Performance Food Group, Inc.

Performance Food Group, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-02-16. 152 Massachusetts residents were affected.

Performance Food Group, Inc. reported an external system breach where an unauthorized individual compromised a company email account starting May 16, 2023, to send phishing emails. Discovered June 21, 2023, the incident affected 4,885 individuals, including 30 Maine residents. Data accessed included names, SSNs, DOBs, driver's licenses, financial account numbers, and health information. No evidence of data exfiltration or fraud was found. PFG engaged forensic investigators, locked out the attacker, and offered 12 months of credit monitoring via Kroll.

Performance Food Group, Inc. filed a supplemental notice with the New Hampshire Attorney General regarding a phishing incident. The breach involved unauthorized access to company email accounts starting May 16, 2023, discovered June 21, 2023. This notice covers 13 New Hampshire residents whose PII (names, SSNs, DOBs, driver's licenses, bank info) was accessed. Initial notifications were sent in Nov 2023; this supplemental notice covers individuals for whom addresses were found later. Kroll identity monitoring is offered.

Performance Food Group, Inc. notified Vermont AG that a phishing campaign compromised employee email accounts starting May 16, 2023. The attacker sent phishing emails, potentially accessing personal data including SSNs, DOBs, and health info. No data exfiltration was confirmed. Kroll provided identity monitoring to affected individuals.

Performance Food Group, Inc. notified the NH Attorney General of a phishing incident where an unauthorized individual compromised a company email account starting May 16, 2023, to send phishing emails. Discovered June 21, 2023. Nine NH residents were affected; data included names and financial account/routing numbers. No evidence of exfiltration or fraud. Notices sent Nov 8, 2023, offering credit monitoring.

Performance Food Group Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-05-16 and was reported on 2023-11-08. 26 Indiana residents were affected. 4,885 individuals affected in total.

Performance Food Group, Inc. notified consumers of a data breach where an email account was compromised via phishing starting May 16, 2023. Unauthorized access was discovered June 21, 2023. No data exfiltration was confirmed, but personal information was potentially accessed. PFG engaged forensic investigators and offered 12 months of identity monitoring via Kroll.

Performance Food Group, Inc. notified the NH Attorney General of a data breach discovered on March 7, 2023, where an email account was compromised via phishing. Unauthorized access affected personal information of 3 NH residents and 2 RI residents. No exfiltration confirmed. PFG locked out users, engaged forensic investigators, and offered 12 months of Kroll credit monitoring.

Performance Food Group, Inc. notified employees of a data breach affecting the PFG Customized segment. Unauthorized access to email accounts occurred via a configuration vulnerability in the remote access app, potentially dating back to 2011. Affected data likely included names, addresses, SSNs, and driver's license numbers. PFG engaged the FBI, reset passwords, and offered 12 months of identity protection.

Performance Food Group, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2018-09-21. 3 Massachusetts residents were affected. The report records the breach type as electronic.