HackingRetail & ConsumerRetailStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedPIIIdentity (basic)Financial accountCredentialsLowContained

Fruitful Yield, Inc.

bd_02599ddf63d95110 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jul 11, 2018

To disclose

—

Affected

3state residents only

Confidence

66%

Full breach record for Fruitful Yield, Inc. →2 incidents on file

Fruitful Yield, Inc. notified customers of a data breach affecting its e-commerce sites (FruitfulYield.com, NOW-2-U.com, VitaminExperts.com). Unauthorized access occurred between May 29 and June 13, 2018, via a third-party vendor's extension. Exposed data included names, addresses, credit card details (including CVV), and usernames/passwords. The company engaged forensic consultants, patched vulnerabilities, and offered one year of Kroll identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

May 29, 2018

Begins

Jul 11, 2018

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Name: Fruitful Yield, Inc.
norm: fruitful yield

Name: Fruitful Yield, Inc.
norm: fruitful yield
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: May 29, 2018 – Jun 13, 2018
Materiality determined: —
Notification sent: —
Affected individuals: 3state-resident count only
Data types: PIIIdentity (basic)Financial accountCredentials
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: supply_chain

During the incident: Working with our security consultant
Conducting an investigation into this matter
Reporting it to the third party vendor
Identified and patched the point-of-entry
Conducted an in-depth review of server logs
Created and deployed security patches
Set-up and conducted nightly in-depth security scans for malware
Removed all files and script references uploaded by the unauthorized user
Updated our prioritization of security patches
Secured the services of Kroll to provide identity monitoring at no cost to you for one year
Changes made: Identified and patched the point-of-entry
Created and deployed security patches
Updated our prioritization of security patches to address issues relating to this vendor and our e-commerce websites
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Fruitful-Yield.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 11, 2018
Raw hash: 57dca320c40afb7c4fe3747d88ab18a80562d34ee3f0bc3791f953fbbeea4e59

Reporting entityFruitful Yield, Inc.

Victim entityFruitful Yield, Inc.

IncidentThird-Party / Supply Chain

Stated responseWorking with our security consultant

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov