Garden of Life, LLC
bd_526e3fb4468ed092 · schema v1 · pii pii-v1
Full breach record for Garden of Life, LLC →2 incidents on fileGarden of Life, LLC notified the New Hampshire Attorney General of a data breach affecting 4 state residents. An unauthorized third party exploited an unpatched vulnerability in Oracle E-Business Suite between August 9-10, 2025, to access employee and contractor PII (names, SSNs, contact info). The company discovered the incident on November 11, 2025, isolated affected systems, engaged forensic experts, and sent notification letters on December 4, 2025, offering 24 months of identity protection services.
J jump to incidentP pin to compareR raw source
Incident timeline
Aug 9, 2025
Begins
Nov 11, 2025
Discovered
Dec 12, 2025
Filed
vs. sector median
3 wks faster
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Sitecl0pbd_ec4c9437f690de472025-11-13 · +28dVerified by operator
Regulatory filings (6) · sorted by filing gap
- Massachusetts State AGbd_174932bce476c8872025-12-12Verified by operator
- Montana State AGbd_836251fccf324aec2025-12-12Verified
- Maine State AGbd_f032b1f7c39531fa2025-12-12Candidate
- Indiana State AGbd_01940a2f5f3090762025-12-04 · +8dVerified
Show 2 more filings ↓Show fewer ↑up to 38d gap
- Nebraska State AGbd_ad8c0255642bf7962025-12-04 · +8dVerified
- Vermont State AGbd_ef65a6f54dd21f0e2025-11-04 · +38dVerified
Filing propagation · 7 filings · 7 states
View merged incident ↗Pattern: first filing Nov 4 (VT), last Dec 12 (NH) — a 38-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.