Sysco Corporation

Sysco Corporation notified California AG on May 16, 2023 of a data breach, which occurred on Jan 14, 2023. Data exposed: Social Security number, Financial / bank account, Name.

All 4 filings by Sysco Corporation, state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)

Organization: Sysco Corporation
Source: California AG · source record
Date reported: May 16, 2023
Date(s) of breach: Saturday, January 14, 2023
Residents affected: Not published by this source
Data exposed: Social Security number Financial / bank account Name
Notice letter: Sample notice (PDF)
Discovered: Mar 5, 2023, as stated in the letter
"On March 5, 2023, Sysco became aware of a cybersecurity event perpetrated by a threat actor believed to have begun on January 14, 2023, in which the threat actor gained access to our systems without authorization and claimed to have acqu..."
Days to notice: 72 days from discovery (Mar 5, 2023) to the California record (May 16, 2023). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period
Offered in the letter: 24 months of credit or identity monitoring through Experian
First seen by BreachTally: 2026-10-30 15:58 UTC

Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.

Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.

Other filings by Sysco Corporation

Organization	Source	State	Reported	Residents affected	Data exposed
Sysco Corporation	Vermont AG	VT	Jul 28, 2026	9	Social Security number
Sysco Corporation	Massachusetts OCABR	MA	Jul 28, 2026	4	Social Security number
Sysco Corporation	Oregon DOJ	OR	May 16, 2023	126,243	Not stated

Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.