HackingVulnerability ExploitCapture Stored DataData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHighContained
Nature's Path Foods, Inc
bd_4b6baf30edcf3bfc · schema v1 · pii pii-v1
Full breach record for Nature's Path Foods, Inc →Nature’s Path Foods, Inc. disclosed a data breach occurring on September 1, 2023, affecting approximately 10,000 individuals. The incident involved unauthorized access to a customer database containing names, addresses, email addresses, phone numbers, and partial credit card information. The company engaged forensic investigators and offered 12 months of credit monitoring to affected consumers.
Vermont clock⏱ VT AG >14 bday9 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed10,000 affectedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-10-31-natures-path-foods-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 31, 2023
- Raw hash
- ff92a5ed8d841768e74c82dd4dd28e1e0f4daaaf323a63aa5c04def1b5ebefc7
Reporting entity
- Name
- Nature's Path Foods, Incnorm: nature s path foods
Victim entity
- Name
- Nature's Path Foods, Incnorm: nature s path foods
Incident
- Discovered
- Sep 1, 2023
- Materiality determined
- Oct 31, 2023
- Notification sent
- Oct 31, 2023
- Affected individuals
- 10,000
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with the Vermont Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(60 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.