HackingRetail & ConsumerRetailData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

FARMERS' RICE COOPERATIVE

bd_464d761d2e5aa9b9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 31, 2024

Filed

Aug 22, 2025

To disclose

51 weeks

Affected

1state residents only

Linked

6 filings

Confidence

64%

Full breach record for FARMERS' RICE COOPERATIVE →

Farmer's Rice Cooperative notified the New Hampshire Attorney General of a data security incident detected on August 31, 2024. An unauthorized third party gained access to the network between August 30 and September 2, 2024. The incident potentially compromised personal information, including names, Social Security numbers, dates of birth, and addresses, for one New Hampshire resident. Notification letters were mailed on July 1, 2025, offering 24 months of credit monitoring and identity protection services through IDX.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d51 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 1 days

discovery → filing · 51 weeks / 356 days

Aug 30, 2024

Begins

Aug 31, 2024

Discovered

Aug 22, 2025

Filed

vs. sector median

+43 wks slower

This filing is one of 6 about the same incident.View merged incident

A leak claim by play about this victim predates this filing by 357 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_ba7cdfe100b5454f2024-08-30 · +357dVerified by operator

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_23caec4049c368382025-08-20 · +2dVerified
Montana State AGbd_61ac6d84feb099832025-08-20 · +2dVerified
California State AGbd_c6bf2ce7d83f71a62025-08-19 · +3dCandidate
Indiana State AGbd_c14af2a469730cc02025-07-01 · +52dVerified

Name: FARMERS' RICE COOPERATIVE
norm: farmers rice cooperative
Domain: farmersrice.com

Name: FARMERS' RICE COOPERATIVE
norm: farmers rice cooperative
Domain: farmersrice.com
Industry: Retail & Consumerllm

Discovered: Aug 31, 2024
Breach occurred: Aug 30, 2024 – Sep 2, 2024
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jul 1, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: exploit_public_facing

During the incident: Secured and remediated the compromise
Engaged additional third-party experts
Enhanced its data security
Commenced an investigation
Worked with specialized third parties to investigate how the incident occurred
Take appropriate remedial and hardening steps to enhance network security and data privacy
Mailed notification letters to impacted resident
Provided complimentary credit monitoring and identity protection services for twenty-four (24) months through IDX
Changes made: Enhanced its data security
Take appropriate remedial and hardening steps to enhance network security and data privacy
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 51 weeks(356 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJul 1 · first

California State AG+49d

Maine State AG+50d

Montana State AG+50d

New Hampshire State AG+52d · this page

Pattern: first filing Jul 1 (IN), last Aug 22 (NH) — a 52-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/farmers-rice-cooperative-20250822.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 22, 2025
Raw hash: 1113c5de827d695eec2179c35bd5d3e72d251e73ec446e50f1e1bba2becb5293

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityFARMERS' RICE COOPERATIVE

Victim entityFARMERS' RICE COOPERATIVE

Incidentdiscovered Aug 31, 2024

Stated responseSecured and remediated the compromise

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov