HackingVulnerability ExploitCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowActive

Garden of Life, LLC

bd_9d9b8fddcabfc480 · schema v1 · pii pii-v1

Full breach record for Garden of Life, LLC →

Garden of Life, LLC notified the Maryland Attorney General of a data incident affecting approximately 788 Maryland residents. Unauthorized access to a third-party payment processing software on the Garden of Life website occurred in July 2024 and was discovered on December 18, 2024. The incident exposed names, addresses, emails, credit/debit card numbers, expiration dates, and CVVs. Garden of Life engaged cybersecurity experts, isolated the affected system, and is sending notification letters to affected residents.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed788 affectedView incident

Source provenance

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376197.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 13, 2025
Raw hash: e82dc8a69355aea5fce73e720713d5a8d6b0e81a2c9c1fc49a2707cda4990ff2

Reporting entity

Name: Garden of Life, LLC
norm: garden of life
Domain: gardenoflife.com

Victim entity

Name: Garden of Life, LLC
norm: garden of life
Domain: gardenoflife.com

Incident

Discovered: Dec 18, 2024
Materiality determined: —
Notification sent: Jan 17, 2025
Affected individuals: 788
Data types: IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Notified Maryland Office of the Attorney General
Initial access: exploit_public_facing

Compliance

Time to disclose: 47 weeks(330 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.