HackingRetail & ConsumerRetailStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedFinancial accountPIILowContained

Amana Meat Shop & Smokehouse

bd_45bded74c883c336 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 6, 2023

Filed

Sep 20, 2023

To disclose

15 weeks

Affected

30state residents only

Linked

4 filings

Confidence

66%

Full breach record for Amana Meat Shop & Smokehouse →3 incidents on file

Amana Meat Shop & Smokehouse notified the New Hampshire Attorney General that a third-party e-commerce vendor, CommerceV3, experienced a security incident affecting approximately 30 New Hampshire residents. The unauthorized access occurred between November 24, 2021, and December 14, 2022. The incident involved payment card information processed via CommerceV3. Amana Meat Shop confirmed its own systems were not impacted. Notifications were mailed to affected residents on September 13, 2023.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 559 days

discovery → filing · 15 weeks / 106 days

Nov 24, 2021

Begins

Jun 6, 2023

Discovered

Sep 20, 2023

Filed

vs. sector median

+6 wks slower

This filing is one of 4 filings about the same incident.View merged incident

Part of CommerceV3 supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_6039a6044f9591122023-09-20Candidate
California State AGbd_e83e1811170efe782023-09-20Verified
Indiana State AGbd_566c890f1f5da29b2023-09-13 · +7dVerified

Name: Amana Meat Shop & Smokehouse
norm: amana meat shop smokehouse

Name: Amana Meat Shop & Smokehouse
norm: amana meat shop smokehouse
Industry: Retail & Consumerllm

Discovered: Jun 6, 2023
Breach occurred: Nov 24, 2021 – Dec 14, 2022
Undetected for: 559 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 13, 2023
Affected individuals: 30state-resident count only
Data types: Financial accountPII
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General Formella
Third party: via CommerceV3, Inc.
Initial access: supply_chain

During the incident: Engaged breach notification professionals, IDX, a Zerofox Company, to establish a dedicated assistance line
IDX mailed notification letters to the approximately 30 New Hampshire residents on September 13, 2023
Conducted a thorough review of our systems and confirmed that the incident did not affect the Amana Meat Shop's internal network
Working closely with CommerceV3 to address the issue
Changes made: CommerceV3 has implemented additional security measures designed to further protect the privacy of its customers’ data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(106 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGSep 13 · first

Maine State AG+7d

California State AG+7d

New Hampshire State AG+7d · this page

Pattern: first filing Sep 13 (IN), last Sep 20 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/amana-meat-shop-smokehouse-20230920.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 20, 2023
Raw hash: b4e5a36ed5604bfbaf4b50615f65f740400d13bd17f81f72a48359986b44eb1c

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityAmana Meat Shop & Smokehouse

Victim entityAmana Meat Shop & Smokehouse

Incidentdiscovered Jun 6, 2023

Stated responseEngaged breach notification professionals, IDX, a Zerofox Company, to establish a dedicated assistance line

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov