HackingRetailCustomer Data InvolvedFinancial accountFinancial credentialsMediumContained

VALRHONA, INC.

bd_3548dcb349a591e0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 4, 2023

Filed

Nov 30, 2023

To disclose

8 weeks

Affected · nationwide

6,53745 in this filing

Linked

5 filings

Confidence

75%

Full breach record for VALRHONA, INC. →

Valrhona Inc. reported a data breach to the Maine Attorney General, which was discovered on October 4, 2023, and occurred on September 2, 2021. The breach was an external system breach (hacking), affecting 45 Maine residents and a total of 6,537 individuals. The compromised information includes names or other personal identifiers in combination with financial account numbers or credit/debit card numbers and their security codes. Valrhona Inc. provided written notification to the affected consumers on December 1, 2023, and offered identity theft protection services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Oct 4, 2023 → Filed with AG Nov 30, 202357d ⏱ ME AG >30d8 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 762 days

discovery → filing · 8 weeks / 57 days

Sep 2, 2021

Begins

Oct 4, 2023

Discovered

Nov 30, 2023

Filed

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

California State AGbd_23db11c19aa7a09b2023-11-30Verified
Massachusetts State AGbd_e47cc1c93dfd13682023-11-30Verified
Vermont State AGbd_31d276f3e634f03e2023-12-01 · +1dVerified
Montana State AGbd_cc72e9f5f2ad358d2023-12-01 · +1dVerified

Name: VALRHONA, INC.
norm: valrhona

Name: VALRHONA, INC.
norm: valrhona

Discovered: Oct 4, 2023
Breach occurred: Sep 2, 2021
Undetected for: 762 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 1, 2023
Affected individuals: 6,537state + nationwide
Data types: Financial accountFinancial credentials
Data elements: Financial account number
Attack vector: Unauthorized Access
Threat actor: External

Changes made: Offered identity theft protection services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(57 days from discovery to filing)
Compliance flags: ME AG >30d · 57d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Oct 4, 2023
→ Filed with AG: Nov 30, 2023
57d 30 days (soft) ME AG >30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Oct 4, 2023 → Filed with AG: Nov 30, 2023	57d	30 days (soft)	ME AG >30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

California State AGNov 30 · first

Massachusetts State AGNov 30 · first

Maine State AGNov 30 · first · this page

Vermont State AG+1d

Montana State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b7fc371e-1d53-46be-ae5b-4b7992ae7fca.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 30, 2023
Raw hash: b678d230276f2977896b5d9ac47b8f59dc7c8b25de69e720923d5db2db774b87

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityVALRHONA, INC.

Victim entityVALRHONA, INC.

Incidentdiscovered Oct 4, 2023

Stated responseOffered identity theft protection services

ComplianceME AG >30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov