HackingCustomer Data InvolvedFINANCIAL_ACCOUNTAUTHENTICATIONLowResolved
Gerten Greenhouse & Garden Center Inc.
bd_93d92d4aa3f2d3e1 · schema v1 · pii pii-v1
Full breach record for Gerten Greenhouse & Garden Center Inc. →Gerten Greenhouse & Garden Center, Inc. reported an external system breach that occurred from May 14, 2022, to July 21, 2022, and was discovered on August 18, 2022. The breach impacted 2,944 individuals in total, with one resident from Maine affected. The compromised data included names and financial account numbers or credit/debit card numbers along with their respective security codes or PINs. In response, the company offered identity theft protection services, including CyberScan monitoring and a $1,000,000 insurance reimbursement policy through IDX.
Maine clockDiscovered Aug 18, 2022 → Filed with AG Sep 14, 202227d ✓ ME AG ≤30d27 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_9171d9af7be96db5New Hampshire State AGfiled 2022-09-15(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/7368e3a3-2abd-49b4-afaa-34bab3385889.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 14, 2022
- Raw hash
- c3d54897035bf7e25113b261b7521d464b3f6d8b9d1f4f0142e0d10c5e2fe385
Reporting entity
- Name
- Gerten Greenhouse & Garden Center Inc.norm: gerten greenhouse garden center
- Domain
- gertens.com
Victim entity
- Name
- Gerten Greenhouse & Garden Center Inc.norm: gerten greenhouse garden center
- Domain
- gertens.com
Incident
- Discovered
- Aug 18, 2022
- Materiality determined
- —
- Notification sent
- Sep 14, 2022
- Affected individuals
- 1
- Data types
- FINANCIAL_ACCOUNTAUTHENTICATION
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 27d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 18, 2022→ Filed with AG: Sep 14, 202227d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.