HackingRetail & ConsumerRetailCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsLowContained

The Honest Kitchen

bd_bab108d35fcfc76d · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Feb 14, 2017

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

66%

Full breach record for The Honest Kitchen →

The Honest Kitchen, Inc. reported an unauthorized network intrusion occurring on November 30, 2016. The breach exposed customer personal information including names, email addresses, physical addresses, and payment card data (card numbers, CID/security codes, and expiration dates). The company engaged a third-party cybersecurity firm for investigation and remediation, notified the FBI, and offered 12 months of complimentary identity monitoring services through Kroll to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 30, 2016

Begins

Feb 14, 2017

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_cc2382596d46f5282017-02-14Verified
Montana State AGbd_51d1b639629e452d2017-02-15 · +1dCandidate

Name: The Honest Kitchen
norm: the honest kitchen
Domain: thehonestkitchen.com

Name: The Honest Kitchen
norm: the honest kitchen
Domain: thehonestkitchen.com
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Nov 30, 2016
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Financial accountFinancial credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified the FBI

During the incident: Launched an immediate investigation into the intrusion
Working with a leading independent cybersecurity firm to investigate the intrusion and remediate our systems
Implemented additional safeguards to help prevent against future incidents
Notified the FBI
Taken steps to provide notice of this incident to credit card processors
Offering a complimentary 12-month membership to identity monitoring services provided by Kroll
Changes made: Implemented additional safeguards to help prevent against future incidents
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGFeb 14 · first

California State AGFeb 14 · first · this page

Montana State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-66352
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 14, 2017
Raw hash: 1b1ea6644e3733a2ad42a78588bed54a25aafdddb12845e099b9b57a9efe7bcc

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityThe Honest Kitchen

Victim entityThe Honest Kitchen

IncidentUnauthorized Access

Stated responseLaunched an immediate investigation into the intrusion

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov