AeroGrow International Inc
bd_8a5652e1e1595828 · schema v1 · pii pii-v1
Full breach record for AeroGrow International Inc →2 incidents on fileAeroGrow International, Inc. disclosed that malicious code (likely a skimmer) was present on its eCommerce vendor's payment page between October 29, 2018, and March 4, 2019. The code potentially compromised payment card numbers, expiration dates, and CVV/CVC codes. The company discovered the incident on March 4, 2019, removed the code, secured the website, notified law enforcement, and engaged third-party experts. Identity protection services were offered to affected customers.
J jump to incidentP pin to compareR raw source
Incident timeline
Oct 29, 2018
Begins
Mar 4, 2019
Discovered
Apr 4, 2019
Filed
vs. sector median
5 wks faster
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- Massachusetts State AGbd_264c84d3fb8cd5502019-04-04Verified
- Oregon State AGbd_96daf0e6a27f8aaa2019-04-04Candidate
- Montana State AGbd_c27e06adbb0023f92019-04-04Verified
- Washington State AGbd_f0a43c62e782c2022019-04-05 · +1dVerified
Show 1 more filing ↓Show fewer ↑up to 13d gap
- New Hampshire State AGbd_a3366bdb8a26803f2019-04-17 · +13dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Apr 4 (MA), last Apr 17 (NH) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.