HackingOtherCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)PHIMinorMediumContained

GreenWaste Recovery

bd_90362cb2efe7c41b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 27, 2023

Filed

Apr 5, 2024

To disclose

19 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

65%

Full breach record for GreenWaste Recovery →

GreenWaste Recovery, LLC reported unauthorized access to its network from November 22-27, 2023, discovered on November 27, 2023. An external party accessed files containing personal information including names, SSNs, driver's licenses, financial account details, and health insurance/medical data. The company secured systems, engaged forensic experts, notified law enforcement, and offered credit monitoring. No specific count of affected individuals was disclosed in the provided templates.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d19 weeks discovery → filing

Incident timeline

undetected · 5 days

discovery → filing · 19 weeks / 130 days

Nov 22, 2023

Begins

Nov 27, 2023

Discovered

Apr 5, 2024

Filed

vs. sector median

+11 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_c0672a6f00fb7fa22023-12-07 · +119dCandidate

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_8ce3c6826d86b6eb2024-04-05Verified by operator
Indiana State AGbd_0936945c012d2a622024-04-04 · +1dVerified by operator
Massachusetts State AGbd_80a4f843e63504a62024-04-17 · +12dVerified by operator

Name: GreenWaste Recovery
norm: greenwaste recovery
Domain: greenwaste.com

Name: GreenWaste Recovery
norm: greenwaste recovery
Domain: greenwaste.com
Industry: Otherllm

Discovered: Nov 27, 2023
Breach occurred: Nov 22, 2023 – Nov 27, 2023
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHIMinor
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
Threat actor: External
Regulator citations: Notified law enforcement

During the incident: Took immediate steps to secure our network systems
Engaged a data-review firm to determine what information was contained in those files
Hired third-party experts to investigate and remediate any unauthorized activity in our systems
Notified law enforcement
Offering a complimentary membership to Experian’s IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 19 weeks(130 days from discovery to filing)
Compliance flags: Leak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGApr 4 · first

Montana State AG+1d

California State AG+1d · this page

Massachusetts State AG+13d

Pattern: first filing Apr 4 (IN), last Apr 17 (MA) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-583537
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 5, 2024
Raw hash: b98e9eafd9cc7dd5b2b36fac2e1d4a8ac079a9ca796869ec52a2ba2ee5ae9e55

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityGreenWaste Recovery

Victim entityGreenWaste Recovery

Incidentdiscovered Nov 27, 2023

Stated responseTook immediate steps to secure our network systems

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov