Breachesby GlyphWegmans
Disclosed Jun 30, 20223,000,000 affectedSettled
Misconfigured cloud storage exposed 3M+ customers for years; USD 400,000 NY AG
For years Wegmans kept account usernames and passwords, names, emails, addresses and driver's license derived data in misconfigured open cloud storage, affecting more than three million consumers; a researcher alerted it in April 2021. Wegmans paid New York USD 400,000.
What is known
| People affected | 3,000,000 (as reported by the organization) |
|---|---|
| Disclosed | Jun 30, 2022 |
| Attack | Exposed data |
| Data exposed | Credentials and tokensNamesEmailsAddressesGovernment IDs |
| Sector | Retail · US |
| Status | Settled |
| Lawsuit or fine | USD 400,000 NY AG penalty (June 2022) (about $400K) |
Sources
Notices filed
History of this record
First recordedby seedSource
First seen 2026-09-25 (Research), confirmed by Research. Record counts are as reported. Not legal advice.