DisclosureLens
HackingRetailCustomer Data InvolvedGovernment IDMedium

Grandy Organics, LLC

bd_87a257e0752e55f0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 11, 2022

Filed

Apr 20, 2022

To disclose

14 weeks

Affected · nationwide

6254 in this filing

Linked

2 filings

Confidence

50%
Full breach record for Grandy Organics, LLC →

Grandy Organics, LLC, also known as GrandyOats or Bountiful Berry, reported a data breach affecting 54 Maine residents. The breach, which occurred on January 8, 2022, and was discovered on January 11, 2022, resulted from an external system breach (hacking). The compromised information included names in combination with driver's license or non-driver identification card numbers. The company notified affected individuals on April 19, 2022, and offered identity theft protection services.

Maine clockDiscovered Jan 11, 2022 → Filed with AG Apr 20, 202299d ✗ ME AG >90d14 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 3 days
discovery → filing · 14 weeks / 99 days

Jan 8, 2022

Begins

Jan 11, 2022

Discovered

Apr 20, 2022

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Filing propagation · 2 filings · 2 states

View merged incident ↗
New Hampshire State AGApr 20 · first
Maine State AGApr 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.