HackingVulnerability ExploitCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Gerten Greenhouse & Garden Center Inc.
bd_9171d9af7be96db5 · schema v1 · pii pii-v1
Full breach record for Gerten Greenhouse & Garden Center Inc. →Gerten Greenhouse & Garden Center, Inc. notified the New Hampshire Attorney General of a data security incident affecting its online store. Unauthorized access occurred between May 14, 2022, and July 21, 2022. The incident involved payment card information (numbers, expiration, security codes) and customer names/emails for 2 New Hampshire residents. Gertens engaged forensic investigators, reported to law enforcement and card brands, and offered identity protection services.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_93d92d4aa3f2d3e1Maine State AGfiled 2022-09-14(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/gerten-greenhouse-garden-center-20220915.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 15, 2022
- Raw hash
- d85062a7dd79392f10ef70c78ab40296d1078ae75dc7b6097aa57136a4730d53
Reporting entity
- Name
- Gerten Greenhouse & Garden Center Inc.norm: gerten greenhouse garden center
- Domain
- gertens.com
Victim entity
- Name
- Gerten Greenhouse & Garden Center Inc.norm: gerten greenhouse garden center
- Domain
- gertens.com
Incident
- Discovered
- Jun 15, 2022
- Materiality determined
- —
- Notification sent
- Sep 14, 2022
- Affected individuals
- 2
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 13 weeks(92 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.