DisclosureLens
HackingAgriculture & FoodRetail & ConsumerAgricultureHacking OtherSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedIdentity (basic)Financial accountFinancial credentialsMediumContained

Smithfield Specialty Foods Group

bd_3763642991c869a4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 7, 2023

Filed

Jun 29, 2023

To disclose

22 days

Affected · nationwide

22,103163 in this filing

Linked

2 filings

Confidence

50%
Full breach record for Smithfield Specialty Foods Group →

Smithfield Specialty Foods Group LLC reported a data breach impacting customers of its smithfieldmarketplace.com and thepeanutshop.com websites. The breach occurred on the systems of its third-party website hosting provider, Commercev3, Inc. (CV3). An unauthorized party accessed customer information between November 24, 2021, and December 14, 2022. The compromised data includes names, billing addresses, email addresses, and payment card details such as card numbers, expiration dates, and security codes. Smithfield was notified of the incident by CV3 on June 7, 2023. In response, Smithfield suspended the compromised web hosting service and is offering affected individuals one year of complimentary credit monitoring and identity protection services.

Maine clockDiscovered Jun 7, 2023 → Filed with AG Jun 29, 202322d ✓ ME AG ≤30d22 days discovery → filing

Incident timeline

undetected · 560 days
discovery → filing · 22 days

Nov 24, 2021

Begins

Jun 7, 2023

Discovered

Jun 29, 2023

Filed

This filing is one of 2 about the same incident.View merged incident
Part of CommerceV3 supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
California State AGJun 29 · first
Maine State AGJun 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.