Craft Beer Company GP

Craft Beer Company GP, a beverage company, reported a data breach affecting one Maine resident. The breach, which occurred from March 4 to March 14, 2024, was discovered on March 5, 2024. The incident was categorized as an external system breach or hacking, resulting in the compromise of the affected individual's name and driver's license number. The company notified the affected resident on May 8, 2024, and offered 24 months of identity theft protection services through Experian.

Affected (this filing): 1

Craft Beer Company GP (CBC) filed a supplemental notice with the Maryland Attorney General on January 16, 2025, updating a May 8, 2024 breach report. CBC discovered unauthorized network access on March 5, 2024. The incident affected current and former employees and dependents, exposing names, SSNs, driver's licenses, passport numbers, bank account numbers, and health insurance data. The number of affected Maryland residents was updated from 9 to 14. CBC contained the incident by taking networks offline, engaged forensic experts and law enforcement, and offered 24 months of credit monitoring.