HackingPIIIdentity (basic)CredentialsLowContained

Diamond Foods, LLC

bd_c8c8ad6e69f56d0a · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 23, 2021

Filed

Jul 15, 2021

To disclose

25 weeks

Affected

2state residents only

Linked

3 filings

Confidence

64%

Full breach record for Diamond Foods, LLC →

Diamond Foods, LLC notified Montana AG of unauthorized network access between Dec 2020 and Jan 2021. An employee email account was compromised. Investigation with forensic specialists confirmed unauthorized access. No evidence of misuse found. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 46 days

discovery → filing · 25 weeks / 173 days

Dec 8, 2020

Begins

Jan 23, 2021

Discovered

Jul 15, 2021

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_4a3094ed11acaa272021-07-15Verified
Massachusetts State AGbd_986caf2224d5cedc2021-07-15Verified

Name: Diamond Foods, LLC
norm: diamond foods

Name: Diamond Foods, LLC
norm: diamond foods

Discovered: Jan 23, 2021
Breach occurred: Dec 8, 2020 – Jan 23, 2021
Undetected for: 46 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 15, 2021
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)Credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Initiated an investigation
Conducted investigation with the assistance of third-party forensic specialists
Moved quickly to secure our network
Arranged to have IDX provide credit monitoring and identity protection services to you for 12 months at no cost
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(173 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGJul 15 · first

Massachusetts State AGJul 15 · first

Montana State AGJul 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/a-notif-86.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 15, 2021
Raw hash: 08814a548a6f595e01f7ffa62d6ac42a67165fc93e4906c1cb5fcfe7c2b592fc

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityDiamond Foods, LLC

Victim entityDiamond Foods, LLC

Incidentdiscovered Jan 23, 2021

Stated responseInitiated an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov