HackingHacking OtherSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowResolved
Great Fermentations
bd_16a238a88ce1dedc · schema v1 · pii pii-v1
Full breach record for Great Fermentations →BTCE Inc, doing business as Great Fermentations, reported a data breach affecting 31 Maine residents. The breach was attributed to a third-party vendor, CommerceV3, and involved an external system hack that occurred between November 24, 2021, and December 14, 2022. The breach was discovered on June 6, 2023. The compromised information includes names and financial account or credit/debit card numbers along with their security codes or PINs. Great Fermentations offered 12 months of credit monitoring services through Experian to the affected individuals.
Maine clockDiscovered Jun 6, 2023 → Filed with AG Jul 12, 202336d ⏱ ME AG >30d5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_546cb16b35bce7feMontana State AGfiled 2023-07-12Verified
- bd_c99c1a08fe0a68c9New Hampshire State AGfiled 2023-07-17(5d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/49f43dab-140a-423b-ae94-24e5de5acc29.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 12, 2023
- Raw hash
- 3a2269f6466965c627ba0a4274e2c4220fe94d267b2867b38ca0aceeb1865b66
Reporting entity
- Name
- Great Fermentationsnorm: great fermentations
- Domain
- greatfermentations.com
Victim entity
- Name
- Great Fermentationsnorm: great fermentations
- Domain
- greatfermentations.com
Incident
- Discovered
- Jun 6, 2023
- Materiality determined
- —
- Notification sent
- Jul 12, 2023
- Affected individuals
- 31
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Third-Party / Supply Chain
Compliance
- Time to disclose
- 5 weeks(36 days from discovery to filing)
- Compliance flags
- ME AG >30d · 36d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 6, 2023→ Filed with AG: Jul 12, 202336d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.