HackingRetail & ConsumerRetailRansomwareTargetedData ExfiltratedIdentity (basic)Financial accountLowContained

AeroGrow International Inc

bd_1bb42a0e6c82eaec · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 10, 2015

Filed

Jul 9, 2015

To disclose

29 days

Affected

18state residents only

Linked

4 filings

Confidence

66%

Full breach record for AeroGrow International Inc →2 incidents on file

AeroGrow International, Inc. filed a supplemental notice with the NH AG regarding a malware attack on its online servers. The incident occurred between May 13 and June 10, 2015, affecting 18 New Hampshire residents. Compromised data included names, addresses, and payment card details. The company eradicated the malware, engaged forensic specialists, alerted law enforcement, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 28 days

discovery → filing · 29 days

May 13, 2015

Begins

Jun 10, 2015

Discovered

Jul 9, 2015

Filed

vs. sector median

3 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_15c9ef680eaa947d2015-07-09Candidate
New Hampshire State AGbd_5cca8b0b0463a2282015-06-03 · +36dVerified
California State AGbd_783164df3d6bebca2015-06-03 · +36dCandidate

Name: AeroGrow International Inc
norm: aerogrow international

Name: AeroGrow International Inc
norm: aerogrow international
Industry: Retail & Consumerllm

Discovered: Jun 10, 2015
Breach occurred: May 13, 2015 – Jun 10, 2015
Undetected for: 28 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 10, 2015
Affected individuals: 18state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Department of Justice Office of the Attorney General
Initial access: exploit_public_facing

During the incident: Hired cybersecurity specialists to investigate the incident
Eradicated malicious code installed on our systems
Alerted law enforcement authorities
Offered a one-year membership in Experian’s ProtectMyID Elite credit monitoring product at no cost to the residents
Changes made: Implemented security plan in response to the first attack
Conducted a second, comprehensive review of our systems in an effort to prevent a recurrence
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 2 states

View merged incident ↗

New Hampshire State AGJun 3 · first

California State AGJun 3 · first

California State AG+36d

New Hampshire State AG+36d · this page

Pattern: first filing Jun 3 (NH), last Jul 9 (NH) — a 36-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/aerogrow-20150709.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 9, 2015
Raw hash: b82ee269e59a9b79eb072fcc292a4b6976ec7322ebad81ce6ba7ac1d9b804542

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityAeroGrow International Inc

Victim entityAeroGrow International Inc

Incidentdiscovered Jun 10, 2015

Stated responseHired cybersecurity specialists to investigate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov