HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTHighContained
PurFoods Holdings, LLC
bd_5922a07dfc32ec37 · schema v1 · pii pii-v1
Full breach record for PurFoods Holdings, LLC →PurFoods, LLC, an Iowa-based commercial entity, reported an external system breach (hacking) occurring on January 16, 2023, discovered on July 10, 2023. The incident affected 1,237,681 individuals, including 2,248 Maine residents. Compromised data included names and financial account/credit card numbers. The company provided written notification on August 25, 2023, and offered identity theft protection services via Kroll.
Maine clockDiscovered Jul 10, 2023 → Filed with AG Aug 25, 202346d ⏱ ME AG >30d7 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_71f79a87b2334fa2New Hampshire State AGfiled 2023-08-25Verified
- bd_c2d1d182956f3f11Montana State AGfiled 2023-08-25Candidate
- bd_d13fdb19999e965eCalifornia State AGfiled 2023-08-25Verified
- bd_e470432f0b0b5928Vermont State AGfiled 2023-08-25Verified
Show 2 more filings ↓Show fewer ↑up to 6d gap
- bd_eaf838850645f5a2Washington State AGfiled 2023-08-25Verified
- bd_b19ff7b969be846dOregon State AGfiled 2023-08-31(6d gap)Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c7ad1c53-6e20-41d8-8fb6-f1ccd0e3e0cc.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 25, 2023
- Raw hash
- f3f3df89479526360d25d290be526188b5c165f0667859bc57bd6a4be2078fc4
Reporting entity
- Name
- PurFoods Holdings, LLCnorm: purfoods holdings
Victim entity
- Name
- PurFoods Holdings, LLCnorm: purfoods holdings
Incident
- Discovered
- Jul 10, 2023
- Materiality determined
- —
- Notification sent
- Aug 25, 2023
- Affected individuals
- 1,237,681
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 7 weeks(46 days from discovery to filing)
- Compliance flags
- ME AG >30d · 46d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 10, 2023→ Filed with AG: Aug 25, 202346d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.