HackingStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedPCIPIIIDENTITY_BASICLowActive
Garden of Life, LLC
bd_a7462c85743ddfbd · schema v1 · pii pii-v1
Full breach record for Garden of Life, LLC →Garden of Life, LLC notified the NH Attorney General of a data incident affecting 354 NH residents. Unauthorized access to a third-party payment processing software on its website occurred in July 2024 and was discovered on Dec 18, 2024. Payment card info and consumer PII were accessed. Garden of Life engaged cybersecurity experts, isolated the system, and offered credit monitoring via IDX.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_16db60a5ee4cc990Washington State AGfiled 2025-01-17Candidate
- bd_b5e7686779303432Montana State AGfiled 2025-01-17Verified by operator
- bd_c193468e78213729Indiana State AGfiled 2025-01-17Verified
- bd_d26e0355effbbe56California State AGfiled 2025-01-17Verified
Show 2 more filings ↓Show fewer ↑up to 14d gap
- bd_d58348fb580f2733Maine State AGfiled 2025-01-17Verified
- bd_cfdb75a63e580415Oregon State AGfiled 2025-01-31(14d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/garden-life-20250117.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 17, 2025
- Raw hash
- ba977415986189de0afc40826afd6e69485100bcd550d60a66f3ec187f0c8452
Reporting entity
- Name
- Garden of Life, LLCnorm: garden of life
- Domain
- gardenoflife.com
Victim entity
- Name
- Garden of Life, LLCnorm: garden of life
- Domain
- gardenoflife.com
Incident
- Discovered
- Dec 18, 2024
- Materiality determined
- —
- Notification sent
- Jan 17, 2025
- Affected individuals
- 354
- Data types
- PCIPIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Department of Justice pursuant to NH RSA 359-C:20
- Initial access
- supply_chain
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.