DisclosureLens
MalwareSkimmerCustomer Data InvolvedPCIFinancial accountFinancial credentialsLowContained

AeroGrow International Inc

bd_c27e06adbb0023f9 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Apr 4, 2019

To disclose

—

Affected

141state residents only

Linked

6 filings

Confidence

53%
Full breach record for AeroGrow International Inc →2 incidents on file

AeroGrow International, Inc. said it learned on March 4, 2019 that an unauthorized person may have acquired, through malicious code, payment card information users entered into the eCommerce vendor’s payment page; the code may have been on its website from October 29, 2018 to March 4, 2019. Card numbers, expiration dates and CVV codes may have been compromised; it said no other personal information could have been involved. It removed the code, secured the website and informed law enforcement.

Incident timeline

Oct 29, 2018

Begins

Apr 4, 2019

Filed

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Show 1 more filing ↓up to 13d gap

Filing propagation · 6 filings · 6 states

View merged incident ↗
Massachusetts State AGApr 4 · first
California State AGApr 4 · first
Oregon State AGApr 4 · first
Montana State AGApr 4 · first · this page
Washington State AG+1d
New Hampshire State AG+13d

Pattern: first filing Apr 4 (MA), last Apr 17 (NH) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.