MalwareRetail & ConsumerRetailRansomwarePhishingRansom DemandedData ExfiltratedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Growers Express

bd_7556f6d2f1b3f250 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 9, 2023

Filed

Nov 5, 2023

To disclose

27 days

Affected

2state residents only

Linked

5 filings

Confidence

67%

Full breach record for Growers Express →

Growers Express, LLC, a fresh produce grower-shipper that closed in 2022, disclosed a ransomware attack discovered on October 9, 2023. Attackers exfiltrated former employee HR records including names, SSNs, DOBs, driver's licenses, and direct deposit info. The company isolated the attack, notified law enforcement, and offered two years of Kroll identity monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 27 days

Oct 9, 2023

Discovered

Nov 5, 2023

Filed

vs. sector median

4 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitebianlianbd_ec14dcca253642222023-11-21 · +16dCandidate

Regulatory filings (3) · sorted by filing gap

California State AGbd_18f1e3e19cfa00f12023-11-05Verified
Massachusetts State AGbd_5f141b7df89910592023-11-05Verified
Maine State AGbd_bf506943a32b58ca2023-11-05Verified by operator

Name: Growers Express
norm: growers express

Name: Growers Express
norm: growers express
Industry: Retail & Consumerllm

Discovered: Oct 9, 2023
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1566 Phishing
Threat actor: ExternalFinancial
Regulator citations: Reported the attack to law enforcement
Initial access: phishing_link

During the incident: Isolated the attack
Investigated the incident
Secured IT environment
Reported the attack to law enforcement
Offered identity monitoring services through Kroll
Changes made: Increasing threat detection
Further restricting remote access
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 days(27 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

California State AGNov 5 · first

Massachusetts State AGNov 5 · first

Maine State AGNov 5 · first

Montana State AGNov 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-821.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 5, 2023
Raw hash: eff3c042f3099ee87178aaac50fe2ae4122523140c2a15304fa6d27ba9b4c1bf

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityGrowers Express

Victim entityGrowers Express

Incidentdiscovered Oct 9, 2023

Stated responseIsolated the attack

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov