Social EngineeringManufacturingManufacturingPhishingCustomer Data InvolvedTargetedGovernment IDIdentity (basic)MediumContained

Great Lakes Gelatin Company, LLC

bd_3a0410a5817d65d9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 4, 2021

Filed

Mar 2, 2021

To disclose

26 days

Affected

1state residents only

Confidence

66%

Full breach record for Great Lakes Gelatin Company, LLC →

Great Lakes Gelatin Company, LLC notified the New Hampshire Attorney General of a security incident involving unauthorized access to two employees' email accounts. The unauthorized access occurred between October 13, 2020, and November 3, 2020. The investigation determined that an email or attachment contained the name and Social Security number of one New Hampshire resident. The actor's motive was financial (attempted wire fraud), not data theft. The company secured accounts, engaged an outside IT firm, and offered one year of credit monitoring to the affected resident.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 114 days

discovery → filing · 26 days

Oct 13, 2020

Begins

Feb 4, 2021

Discovered

Mar 2, 2021

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Great Lakes Gelatin Company, LLC
norm: great lakes gelatin
Domain: greatlakeswellness.com

Name: Great Lakes Gelatin Company, LLC
norm: great lakes gelatin
Domain: greatlakeswellness.com
Industry: Manufacturingllm

Discovered: Feb 4, 2021
Breach occurred: Oct 13, 2020 – Nov 3, 2020
Undetected for: 114 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 1, 2021
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Secured the email account
Launched an investigation with the assistance of an outside IT security firm
Conducted a comprehensive review of the contents of the accounts
Offering the New Hampshire resident whose Social Security number is involved one-year of complimentary credit monitoring, fraud consultation, and identity theft restoration services through Kroll
Provided a contact number where the individual may obtain more information regarding the incident
Changes made: Conducting a comprehensive review of its cybersecurity defenses
Will soon implement updated protocols and procedures aimed at preventing any further cybersecurity events
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 days(26 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/great-lakes-gelatin-20210302.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 2, 2021
Raw hash: 2bc068227b771764b8e10ee9117995d5f5139ae359ea6617ac75ee158e9eeb19

Reporting entityGreat Lakes Gelatin Company, LLC

Victim entityGreat Lakes Gelatin Company, LLC

Incidentdiscovered Feb 4, 2021

Stated responseSecured the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov