Speedway LLC
ent_019e22f7f6e9624714c60ebbb805fbbc
Disclosures
7
State AG · 7 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
7,703
as filed · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Speedway LLC
- Normalized
- speedway— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (7)newest first
- Massachusetts State AGas victim2023-05-16
Speedway LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-05-16. 615 Massachusetts residents were affected. The report records the breach type as electronic.
- Vermont State AGas victim2023-05-16
Speedway experienced a security incident involving unauthorized access to Speedy Rewards accounts via credential stuffing and guessing. The incident occurred between April 11 and April 17, 2023. Affected data included names, email addresses, points balances, and other account details. Speedway engaged forensic experts, reset passcodes, and refunded redeemed points. No credit or financial account data was compromised.
- New Hampshire State AGas victim2023-05-16
Speedway notified affected individuals of a security incident involving unauthorized access to Speedy Rewards accounts. The incident involved the use of stolen credentials obtained from other breaches to guess or brute-force user passcodes, resulting in unauthorized redemption of points. Speedway engaged forensic experts, reset passcodes, and refunded points.
- Indiana State AGas victim2023-05-16
Speedway LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2023-04-11 and was reported on 2023-05-16. 7,703 Indiana residents were affected.
- Maine State AGas victim2023-05-16
Speedway LLC reported a credential stuffing attack that affected the rewards accounts of 3 Maine residents. The breach occurred on April 11, 2023, and was discovered on April 17, 2023. The compromised information included financial account numbers or credit/debit card numbers along with their access codes. Customers were notified on May 16, 2023.
- Montana State AGas victim2023-05-16
Speedway LLC notified customers of a security incident where unknown parties attempted to access Speedy Rewards accounts via brute force or credential stuffing starting April 11, 2023. Unauthorized access was detected on April 17, 2023. Affected data included names, emails, points balances, and passcodes. Speedway engaged forensic experts, reset passwords, and refunded points.
- Illinois State AGas victim2023-01-01
SPEEDWAY, LLC filed a data-breach notice with the Illinois Attorney General during 2023 (case 23-311). The register records the breach as discovered on April 11, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.