HackingOtherStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)Financial accountHighContained

CEDAR GROVE COMPOSTING, INC.

bd_1f7fe7e02d6a531f · schema v1 · pii pii-v1

Severity

High

Discovered

Sep 7, 2021

Filed

Nov 30, 2021

To disclose

12 weeks

Affected

1,596state residents only

Linked

5 filings

Confidence

68%

Full breach record for CEDAR GROVE COMPOSTING, INC. →

Cedar Grove Composting, Inc. disclosed an unauthorized access to its network in August 2021, discovered on September 7, 2021. Files were potentially downloaded containing names, DOBs, SSNs, government IDs, and health/insurance info. Approximately 1,596 Washington residents were notified starting November 30, 2021. The company engaged forensic specialists, notified law enforcement, and provided one year of credit monitoring via IDX.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d12 weeks discovery → filing

Incident timeline

undetected · 37 days

discovery → filing · 12 weeks / 84 days

Aug 1, 2021

Begins

Sep 7, 2021

Discovered

Nov 30, 2021

Filed

vs. sector median

+4 wks slower

This filing is one of 5 about the same incident.View merged incident

A leak claim by conti about this victim predates this filing by 67 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitecontibd_7b435e63ef2c3ab32021-09-24 · +67dVerified by operator

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_0ccdf85299be7ebf2021-11-30Verified by operator
Massachusetts State AGbd_61b62b0c7be37aa32021-11-30Verified
Montana State AGbd_a5193c77cb48ed022021-11-30Verified

Name: CEDAR GROVE COMPOSTING, INC.
norm: cedar grove composting

Name: CEDAR GROVE COMPOSTING, INC.
norm: cedar grove composting
Industry: Otherllm

Discovered: Sep 7, 2021
Breach occurred: Aug 1, 2021 – Aug 31, 2021
Undetected for: 37 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 30, 2021
Affected individuals: 1,596state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified federal law enforcement regarding the eventNotifying other regulatory authorities, as required
Initial access: valid_credentials

During the incident: Commenced an investigation into the activity to determine its nature and scope
Engaged third-party forensic specialists
Undertook a comprehensive and diligent review of the potentially affected files
Notified federal law enforcement regarding the event
Provided access to credit and identity monitoring services for one (1) year, through IDX, to individuals whose information was potentially affected by this event, at no cost to these individuals
Notifying other regulatory authorities, as required
Changes made: Working to implement additional safeguards and training to its employees regarding data security
Reviewing and enhancing its existing policies and procedures to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(84 days from discovery to filing)
Compliance flags: WA AG >30dLeak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGNov 30 · first

Massachusetts State AGNov 30 · first

Montana State AGNov 30 · first

Washington State AGNov 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA3189.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 30, 2021
Raw hash: 4a2eabf4199fad34574808bbd88c7ca6ac3d79265fc9e2ad9061664ceb890e1b

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityCEDAR GROVE COMPOSTING, INC.

Victim entityCEDAR GROVE COMPOSTING, INC.

Incidentdiscovered Sep 7, 2021

Stated responseCommenced an investigation into the activity to determine its nature and scope

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com