HackingAgriculture & FoodAgricultureRansomwareData ExfiltratedRansom DemandedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountEmploymentMediumContained

Growers Express

bd_18f1e3e19cfa00f1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 9, 2023

Filed

Nov 5, 2023

To disclose

27 days

Affected

Not disclosed

Linked

5 filings

Confidence

65%

Full breach record for Growers Express →

Growers Express, LLC disclosed a sophisticated computer attack where an external actor accessed employee data files with the goal of extortion. On October 9, 2023, the company discovered that personal information, including names, addresses, SSNs, and direct deposit info, was exfiltrated. The breach occurred on September 20, 2023. The company isolated the attack, reported it to law enforcement, and is offering two years of identity monitoring via Kroll to affected former employees.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 19 days

discovery → filing · 27 days

Sep 20, 2023

Begins

Oct 9, 2023

Discovered

Nov 5, 2023

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitebianlianbd_ec14dcca253642222023-11-21 · +16dCandidate

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_5f141b7df89910592023-11-05Verified
Montana State AGbd_7556f6d2f1b3f2502023-11-05Verified by operator
Maine State AGbd_bf506943a32b58ca2023-11-05Verified by operator

Name: Growers Express
norm: growers express

Name: Growers Express
norm: growers express
Industry: Agriculture & Foodllm

Discovered: Oct 9, 2023
Breach occurred: Sep 20, 2023
Undetected for: 19 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountEmployment
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 ChannelT1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Reported the attack to law enforcement

During the incident: Took immediate action to isolate the attack
Investigated and secured our IT environment
Reported the attack to law enforcement
Offering the services of Kroll to provide identity monitoring at no cost for two years
Changes made: Increasing threat detection
Further restricting remote access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 days(27 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGNov 5 · first

Montana State AGNov 5 · first

Maine State AGNov 5 · first

California State AGNov 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-576114
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 5, 2023
Raw hash: a88ee59ec6130b297dbd518c7d6e08af378fdcfcf2846b4ba90073e16d62ee44

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityGrowers Express

Victim entityGrowers Express

Incidentdiscovered Oct 9, 2023

Stated responseTook immediate action to isolate the attack

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov