Burnt Ridge Nursery and Orchards, Inc.

Burnt Ridge Nursery and Orchards, Inc. disclosed a data security incident involving malware on a third-party e-commerce vendor's server. The malware captured payment card information (cardholder name, number, security code, expiration date) for customers who made purchases between September 18, 2020, and February 3, 2022. The vendor identified the malware in early February 2022, removed it, engaged forensic experts, and notified federal law enforcement and payment card companies. The incident is contained.