HackingCustomer Data InvolvedFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
VALRHONA, INC.
bd_3548dcb349a591e0 · schema v1 · pii pii-v1
Full breach record for VALRHONA, INC. →Valrhona Inc. reported a data breach to the Maine Attorney General, which was discovered on October 4, 2023, and occurred on September 2, 2021. The breach was an external system breach (hacking), affecting 45 Maine residents and a total of 6,537 individuals. The compromised information includes names or other personal identifiers in combination with financial account numbers or credit/debit card numbers and their security codes. Valrhona Inc. provided written notification to the affected consumers on December 1, 2023, and offered identity theft protection services.
Maine clockDiscovered Oct 4, 2023 → Filed with AG Nov 30, 202357d ⏱ ME AG >30d8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_23db11c19aa7a09bCalifornia State AGfiled 2023-11-30Verified
- bd_31d276f3e634f03eVermont State AGfiled 2023-12-01(1d gap)Verified
- bd_cc72e9f5f2ad358dMontana State AGfiled 2023-12-01(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b7fc371e-1d53-46be-ae5b-4b7992ae7fca.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 30, 2023
- Raw hash
- b678d230276f2977896b5d9ac47b8f59dc7c8b25de69e720923d5db2db774b87
Reporting entity
- Name
- VALRHONA, INC.norm: valrhona
Victim entity
- Name
- VALRHONA, INC.norm: valrhona
Incident
- Discovered
- Oct 4, 2023
- Materiality determined
- —
- Notification sent
- Dec 1, 2023
- Affected individuals
- 45
- Data types
- FINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- ME AG >30d · 57d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 4, 2023→ Filed with AG: Nov 30, 202357d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.