HackingRetail & ConsumerRetailStolen CredentialsCapture Stored DataSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Financial accountFinancial credentialsLowContained

East Shore Specialty Foods

bd_ac573145ba312ce4 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 26, 2023

To disclose

—

Affected

3state residents only

Linked

7 filings

Confidence

66%

Full breach record for East Shore Specialty Foods →

East Shore Specialty Foods notified customers of a data breach affecting its third-party e-commerce platform, CommerceV3. Unauthorized access occurred between Nov 2021 and Dec 2022, exposing names, billing addresses, and full payment card details (number, CVV, expiration). The company is offering credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 24, 2021

Begins

Oct 26, 2023

Filed

This filing is one of 7 filings about the same incident.View merged incident

Part of CommerceV3 supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_72f50472c6f2ec5e2023-10-26Verified by operator
Maine State AGbd_962a01b244eb41582023-10-26Candidate
Indiana State AGbd_bd1403a134868a2f2023-10-26Verified
New Hampshire State AGbd_c7d2bf282bdae4072023-10-26Verified by operator

Show 2 more filings ↓

Massachusetts State AGbd_e3f2bc97a24ac0802023-10-26Verified by operator
Vermont State AGbd_e87dc4df2c9aad1c2023-10-26Verified

Name: East Shore Specialty Foods
norm: east shore specialty foods

Name: East Shore Specialty Foods
norm: east shore specialty foods
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Nov 24, 2021 – Dec 14, 2022
Materiality determined: —
Notification sent: Oct 26, 2023
Affected individuals: 3state-resident count only
Data types: Identity (basic)Financial accountFinancial credentials
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Third party: via CommerceV3
Initial access: valid_credentials

During the incident: Offering credit monitoring to all potentially affected customers through Experian
Working to review existing policies and procedures
Implementing additional administrative and technical safeguards
Changes made: Reviewing existing policies and procedures
Implementing additional administrative and technical safeguards
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Massachusetts State AGOct 26 · first

Maine State AGOct 26 · first

Indiana State AGOct 26 · first

New Hampshire State AGOct 26 · first

Massachusetts State AGOct 26 · first

Vermont State AGOct 26 · first

Montana State AGOct 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-795.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 26, 2023
Raw hash: 3cb09475b5acd201f3bf9d0a2784b25cf54d62ebc684adbd822105597a24b1ef

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityEast Shore Specialty Foods

Victim entityEast Shore Specialty Foods

IncidentThird-Party / Supply Chain

Stated responseOffering credit monitoring to all potentially affected customers through Experian

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov