DisclosureLens
HackingRetail & ConsumerTechnologyRetailCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsMediumContained

Amana Meat Shop & Smokehouse

bd_6039a6044f959112 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 6, 2023

Filed

Sep 20, 2023

To disclose

15 weeks

Affected · nationwide

10,27423 in this filing

Linked

4 filings

Confidence

50%
Full breach record for Amana Meat Shop & Smokehouse →3 incidents on file

Amana Meat Shop & Smokehouse, a point-of-sale vendor, experienced an external system breach (hacking) that occurred from November 24, 2021, to December 14, 2022. The breach was discovered on June 6, 2023. The incident affected 23 Maine residents, compromising their names and financial account or credit/debit card numbers along with associated security codes or PINs. Written notifications were sent to affected consumers on September 13, 2023.

Maine clockDiscovered Jun 6, 2023 → Filed with AG Sep 20, 2023106d ✗ ME AG >90d15 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 559 days
discovery → filing · 15 weeks / 106 days

Nov 24, 2021

Begins

Jun 6, 2023

Discovered

Sep 20, 2023

Filed

vs. sector median

+6 wks slower

This filing is one of 4 filings about the same incident.View merged incident
Part of CommerceV3 supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Indiana State AGSep 13 · first
New Hampshire State AG+7d
California State AG+7d
Maine State AG+7d · this page

Pattern: first filing Sep 13 (IN), last Sep 20 (ME) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.