HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Quality 100% Organic, NON-GMO Seeds- High Mowing Organic Seeds
bd_2b3bb8c62fb9a547 · schema v1 · pii pii-v1
Full breach record for Quality 100% Organic, NON-GMO Seeds- High Mowing Organic Seeds →High Mowing Organic Seeds notified the NH Attorney General of a data security incident affecting its online store. Unauthorized access occurred between June 2-5, 2026, potentially exposing customer names, email addresses, and payment card details (numbers, expiration, security codes). Two NH residents were identified. HMOS engaged independent security experts, reported the incident to the FBI and payment processor, and implemented enhanced security measures.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/high-mowing-organic-seeds-20260623.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 23, 2026
- Raw hash
- e56b367d7ebf9ff1aceb33d85dacc3b8938b492b3b94ad0cfb652494b63502ed
Reporting entity
- Name
- Quality 100% Organic, NON-GMO Seeds- High Mowing Organic Seedsnorm: quality 100 organic non gmo seeds high mowing organic seeds
- Domain
- highmowingseeds.com
Victim entity
- Name
- Quality 100% Organic, NON-GMO Seeds- High Mowing Organic Seedsnorm: quality 100 organic non gmo seeds high mowing organic seeds
- Domain
- highmowingseeds.com
Incident
- Discovered
- Jun 3, 2026
- Materiality determined
- —
- Notification sent
- Jun 17, 2026
- Affected individuals
- 2
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 20 days(20 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.