HackingVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
CommerceV3
bd_92f0fc575267329b · schema v1 · pii pii-v1
Full breach record for CommerceV3 →Smithfield Specialty Foods Group LLC notified customers of a data breach affecting its online accounts hosted by third-party provider CommerceV3, Inc. Unauthorized access occurred between Nov 24, 2021, and Dec 14, 2022, and was discovered on June 7, 2023. Exposed data included names, billing addresses, emails, and payment card details (numbers, expiration dates, security codes). Smithfield suspended impacted services and offered one year of credit monitoring.
California clockDiscovered Jun 7, 2023 → Notified Jun 29, 202322d ✓ CA 60-day OK22 days discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_f85c8ec8dc5d6ba2Vermont State AGfiled 2023-06-30(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-568673
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 29, 2023
- Raw hash
- 3e7181e722251f54df1334a99714b0b9d7d7412165c86b3dfbbf454eaa9f592c
Reporting entity
- Name
- Smithfield Foodsnorm: smithfield foods
- Domain
- smithfieldfoods.com
Victim entity
- Name
- CommerceV3norm: commercev3
- Domain
- commercev3.com
Incident
- Discovered
- Jun 7, 2023
- Materiality determined
- —
- Notification sent
- Jun 29, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Third party
- via CommerceV3, Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 22 days(22 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 22d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 7, 2023→ Notified: Jun 29, 202322d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.