🍁Vermont State AGlinked via multistate filing link · 100%
Clustered 4 filings across 4 jurisdictions · filed May 16, 2023. View entity profile → Other incidents for this victim →
incident inc_0cc8e5f902f64f0b · merge_method deterministic · confidence 100%
Discovered → first regulatory filing
Range of discovered_at dates across filings
Financial account · Financial credentials
Time between earliest and latest filing
Not recorded for this incident
Leak precedence · Materiality delta · SEC filing delay — no leak-site claim in this cluster; no SEC 8-K in this cluster.
ME MT NH VT
all State AG
Earliest sighting first · deep chronology in Litigation Timeline
Apr 11, 2023 → Apr 17, 2023
When the intrusion reportedly occurred, per the linked filings
Apr 17, 2023
Reported by VERMONT AG, NEW HAMPSHIRE AG, MAINE AG filings
About this clustering
DisclosureLens links filings into incidents through layered matchers: deterministic rules (same source document, multistate filings of one breach, tight-window same-victim pairs), a weighted-similarity scorer for cross-source candidates, and an operator review queue for everything uncertain. Each link records its own method and confidence — shown per filing in the timeline below. The system defaults to NOT merging when uncertain, because a false merge (collapsing two unrelated breaches) is more harmful than a false split (showing related filings separately); uncertain pairs route to human review instead of auto-merging. Filing summaries shown in the timeline are AI-generated extracts — verify each against its linked source.
Speedway experienced a security incident involving unauthorized access to Speedy Rewards accounts via credential stuffing and guessing. The incident occurred between April 11 and April 17, 2023. Affected data included names, email addresses, points balances, and other account details. Speedway engaged forensic experts, reset passcodes, and refunded redeemed points. No credit or financial account data was compromised.
Speedway notified affected individuals of a security incident involving unauthorized access to Speedy Rewards accounts. The incident involved the use of stolen credentials obtained from other breaches to guess or brute-force user passcodes, resulting in unauthorized redemption of points. Speedway engaged forensic experts, reset passcodes, and refunded points.
Speedway LLC reported a credential stuffing attack that affected the rewards accounts of 3 Maine residents. The breach occurred on April 11, 2023, and was discovered on April 17, 2023. The compromised information included financial account numbers or credit/debit card numbers along with their access codes. Customers were notified on May 16, 2023.
Affected (this filing): 3
Speedway LLC reported a data breach to the Montana Attorney General. The breach was reported on 2023-05-16. The breach occurred from 4/11/2023 to 4/17/2023. 1 Montana residents were affected.
Affected (this filing): 1