HackingVulnerability ExploitCapture Stored DataData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTHighContained
Etz Hayim Holdings, S.P.C.
bd_18c044bd7927a6f9 · schema v1 · pii pii-v1
Full breach record for Etz Hayim Holdings, S.P.C. →Etz Hayim Holdings dba Lazarus Naturals reported a data incident where malicious actors exploited a software vulnerability on its website between March 1 and June 2, 2023. The breach was discovered on July 10, 2023, affecting approximately 42,000 individuals, including 279 New Hampshire residents. Customer PII, potentially including SSNs, was accessed. The company engaged forensic experts, notified the FBI, and is offering credit monitoring services.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_3703f7a3835d4f61Washington State AGfiled 2023-08-03Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/etz-hayim-holdings-dba-lazarus-naturals-20230803.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 3, 2023
- Raw hash
- 1214f3c86759849614e92ee4c712442680b159604694dec51d02e8bab97b3a5f
Reporting entity
- Name
- Etz Hayim Holdings, S.P.C.norm: etz hayim holdings spc
Victim entity
- Name
- Etz Hayim Holdings, S.P.C.norm: etz hayim holdings spc
Incident
- Discovered
- Jul 10, 2023
- Materiality determined
- —
- Notification sent
- Aug 3, 2023
- Affected individuals
- 42,000
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1074 Data Staged
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of Investigation (“FBI”)
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 24 days(24 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.