HackingAgriculture & FoodAgricultureStolen CredentialsTargetedPIIIdentity (basic)LowContained

FARMERS' RICE COOPERATIVE

bd_61ac6d84feb09983 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 31, 2024

Filed

Aug 20, 2025

To disclose

51 weeks

Affected

22state residents only

Linked

6 filings

Confidence

64%

Full breach record for FARMERS' RICE COOPERATIVE →

Farmer's Rice Cooperative notified Montana residents of a cybersecurity incident occurring August 30-September 2, 2024, discovered on August 31, 2024. The incident involved unauthorized access to personal information. The cooperative engaged a cybersecurity firm, notified law enforcement, and provided IDX identity protection services to affected individuals. Notices were sent on July 1, 2025.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 51 weeks / 354 days

Aug 30, 2024

Begins

Aug 31, 2024

Discovered

Aug 20, 2025

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_ba7cdfe100b5454f2024-08-30 · +355dVerified by operator

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_23caec4049c368382025-08-20Verified
California State AGbd_c6bf2ce7d83f71a62025-08-19 · +1dCandidate
New Hampshire State AGbd_464d761d2e5aa9b92025-08-22 · +2dVerified
Indiana State AGbd_c14af2a469730cc02025-07-01 · +50dVerified

Name: FARMERS' RICE COOPERATIVE
norm: farmers rice cooperative
Domain: farmersrice.com

Name: FARMERS' RICE COOPERATIVE
norm: farmers rice cooperative
Domain: farmersrice.com
Industry: Agriculture & Foodllm

Discovered: Aug 31, 2024
Breach occurred: Aug 30, 2024 – Sep 2, 2024
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jul 1, 2025
Affected individuals: 22state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: notified law enforcement
Initial access: valid_credentials

During the incident: Launched an investigation
Engaged a national cybersecurity firm to assist in assessing the scope of the incident
Took steps to mitigate the potential impact to our community
Notified law enforcement
Evaluating opportunities to further secure our systems
Arranged for you to activate, at no cost to you, IDX identity protection services which includes 12/24 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed ID theft recovery services
Changes made: Evaluating opportunities to further secure our systems to prevent a similar event from occurring again in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 51 weeks(354 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Indiana State AGJul 1 · first

California State AG+49d

Maine State AG+50d

Montana State AG+50d · this page

New Hampshire State AG+52d

Pattern: first filing Jul 1 (IN), last Aug 22 (NH) — a 52-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/08/Consumer-notification-letter-50.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 20, 2025
Raw hash: 612dacfcff4367214720be565672166a3d7e956e2f1c074614b9c9eb213bb780

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityFARMERS' RICE COOPERATIVE

Victim entityFARMERS' RICE COOPERATIVE

Incidentdiscovered Aug 31, 2024

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov