HackingStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Smithfield Foods
bd_7c778396abd98588 · schema v1 · pii pii-v1
Full breach record for Smithfield Foods →Smithfield Specialty Foods Group LLC notified Vermont AG that a third-party web host, CommerceV3, Inc., suffered a cyberattack exposing customer names, billing addresses, emails, and payment card details (including CVV) for purchases made between Nov 2021 and Dec 2022. Smithfield suspended the host's functionality, engaged forensic investigators, and offered one year of credit monitoring. No specific count of affected individuals was provided in the filing.
Vermont clock⏱ VT AG >14 bday22 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-06-29-smithfield-specialty-foods-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 29, 2023
- Raw hash
- 13308e278a155ea93dcd0c9b889b6a270f3e235fc00b23248933bb2814f70992
Reporting entity
- Name
- Smithfield Foodsnorm: smithfield foods
- Domain
- smithfieldfoods.com
Victim entity
- Name
- Smithfield Foodsnorm: smithfield foods
- Domain
- smithfieldfoods.com
Incident
- Discovered
- Jun 7, 2023
- Materiality determined
- Jun 29, 2023
- Notification sent
- Jun 29, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- CV3 notified law enforcement
- Third party
- via CommerceV3, Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 22 days(22 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.