Social EngineeringRetail & ConsumerRetailPhishingStolen CredentialsCustomer Data InvolvedTargetedPIIIdentity (basic)Financial accountCredentialsLowContained

Heartland Food Products, LLC

bd_ba03453aff0db9e4 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 30, 2018

Filed

Jan 11, 2019

To disclose

6 weeks

Affected

1state residents only

Confidence

65%

Full breach record for Heartland Food Products, LLC →

Heartland Food Products, LLC notified Montana residents of a phishing attack on November 30, 2018. An employee's email credentials were compromised, allowing access to customer data including names, addresses, credit card info, and check copies. The attacker attempted to defraud customers via compromised links. Experian credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 11 days

discovery → filing · 6 weeks / 42 days

Nov 19, 2018

Begins

Nov 30, 2018

Discovered

Jan 11, 2019

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Heartland Food Products, LLC
norm: heartland food products

Name: Heartland Food Products, LLC
norm: heartland food products
Industry: Retail & Consumerllm

Discovered: Nov 30, 2018
Breach occurred: Nov 19, 2018 – Nov 30, 2018
Undetected for: 11 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 31, 2019
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)Financial accountCredentials
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Began an investigation to determine the scope of the impact
Instituted additional safeguards
Contracted with Experian for one year at no charge
Changes made: Security measures are constantly analyzed and improved
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-NotificationDetails-11.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 11, 2019
Raw hash: 9d684304ea222f0e8429cf077f8d3f19e2385f2b2622bf14d6a17433db11dd4e

Reporting entityHeartland Food Products, LLC

Victim entityHeartland Food Products, LLC

Incidentdiscovered Nov 30, 2018

Stated responseBegan an investigation to determine the scope of the impact

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov