HackingVulnerability ExploitCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Daily Choice Products
bd_afd9c4c3dcdb55a8 · schema v1 · pii pii-v1
Full breach record for Daily Choice Products →My Daily Choice, Inc. reported an external system breach (hacking) occurring on February 15, 2024. The incident compromised the personal information of 89,188 individuals, including 205 Maine residents. Data accessed included names and financial account or credit/debit card numbers with associated security codes or PINs. Written notification was sent to consumers on June 5, 2024.
Maine clockDiscovered Feb 15, 2024 → Filed with AG Jun 6, 2024112d ✗ ME AG >90d16 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_803fc597669176cdCalifornia State AGfiled 2024-06-06Candidate
- bd_9c51eac988162a63New Hampshire State AGfiled 2024-06-06Verified
- bd_dc10484cd3f7ae8dVermont State AGfiled 2024-06-06Verified
- bd_d74f2efcb22761caIndiana State AGfiled 2024-06-05(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/01792ae0-aabb-45fc-9dd8-cae259529a0c.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 6, 2024
- Raw hash
- 4cc16406b2323c7ce1274211211091e7d3056162a2282402ed2aa76e3143bc26
Reporting entity
- Name
- Daily Choice Productsnorm: daily choice products
- Domain
- dailychoiceproducts.com
Victim entity
- Name
- Daily Choice Productsnorm: daily choice products
- Domain
- dailychoiceproducts.com
Incident
- Discovered
- Feb 15, 2024
- Materiality determined
- —
- Notification sent
- Jun 5, 2024
- Affected individuals
- 89,188
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notification with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 16 weeks(112 days from discovery to filing)
- Compliance flags
- ME AG >90d · 112dME resident >60d · 111d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Feb 15, 2024→ Filed with AG: Jun 6, 2024112d 90 days ME AG >90d Maine Discovered: Feb 15, 2024→ Notified: Jun 5, 2024111d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.