HackingSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Whitley's Peanut Factory
bd_9bb5262dd3c660f5 · schema v1 · pii pii-v1
Full breach record for Whitley's Peanut Factory →Whitley’s Peanut Factory notified customers that an unauthorized party accessed its third-party e-commerce platform, CommerceV3, between Nov 24, 2021, and Dec 14, 2022. CommerceV3 discovered on May 3, 2023, that cardholder data (name, email, billing address, card number, expiration, CVV) was potentially accessed. The incident was contained, and additional security measures were implemented by the vendor.
California clockDiscovered May 3, 2023 → Notified Jul 10, 202368d ✗ CA 60-day late10 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_b65114a618424617Vermont State AGfiled 2023-07-07(3d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-569943
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 10, 2023
- Raw hash
- 01f0933e0b315df48ad3510ee73b0f8a487b997613d88c098ba155d527b16d93
Reporting entity
- Name
- Whitley's Peanut Factorynorm: whitley s peanut factory
Victim entity
- Name
- Whitley's Peanut Factorynorm: whitley s peanut factory
Incident
- Discovered
- May 3, 2023
- Materiality determined
- —
- Notification sent
- Jul 10, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Filed breach notification with California Attorney General
- Third party
- via CommerceV3
- Initial access
- supply_chain
Compliance
- Time to disclose
- 10 weeks(68 days from discovery to filing)
- Compliance flags
- CA 60-day late · 68d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 3, 2023→ Notified: Jul 10, 202368d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.