HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedFINANCIAL_ACCOUNTPCILowContained
AeroGrow International Inc
bd_8a5652e1e1595828 · schema v1 · pii pii-v1
Full breach record for AeroGrow International Inc →AeroGrow International, Inc. disclosed a data breach affecting payment card information (number, expiration, CVV) submitted via its eCommerce payment page. The malicious code was active between October 29, 2018, and March 4, 2019. AeroGrow removed the code, notified law enforcement, engaged third-party experts, and offered one year of Experian IdentityWorks Plus. No other personal information was compromised.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_96daf0e6a27f8aaaOregon State AGfiled 2019-04-04Candidate
- bd_c27e06adbb0023f9Montana State AGfiled 2019-04-04Verified
- bd_f0a43c62e782c202Washington State AGfiled 2019-04-05(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-145989
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 4, 2019
- Raw hash
- 0c4b4edcd403344d575941a6e539a5af792544bccbc84abc455de8c0ad6ce228
Reporting entity
- Name
- AeroGrow International Incnorm: aerogrow international
- Domain
- aerogarden.com
Victim entity
- Name
- AeroGrow International Incnorm: aerogrow international
- Domain
- aerogarden.com
Incident
- Discovered
- Mar 4, 2019
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- FINANCIAL_ACCOUNTPCI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.