HackingAgriculture & FoodAgricultureStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumResolved

Greenheart Farms, Inc.

bd_d088f8aa3c5b6cbb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 4, 2022

Filed

Jun 16, 2022

To disclose

10 weeks

Affected

Not disclosed

Confidence

64%

Full breach record for Greenheart Farms, Inc. →

Greenheart Farms Inc. experienced unauthorized access to an employee's email account between January 22, 2022, and April 4, 2022. The incident was discovered on April 4, 2022. The breach potentially exposed names and Social Security numbers of affected individuals. The company secured the account, engaged a cybersecurity firm, and implemented multi-factor authentication. Identity monitoring services were offered to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 72 days

discovery → filing · 10 weeks / 73 days

Jan 22, 2022

Begins

Apr 4, 2022

Discovered

Jun 16, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Greenheart Farms, Inc.
norm: greenheart farms

Name: Greenheart Farms, Inc.
norm: greenheart farms
Industry: Agriculture & Foodllm

Discovered: Apr 4, 2022
Breach occurred: Jan 22, 2022 – Apr 4, 2022
Undetected for: 72 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 16, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Secured the account
Launched an investigation
Engaged a cybersecurity firm
Changes made: Implemented multi-factor authentication for remote access
Implemented additional measures to enhance existing security protocols
Offering a free one-year membership of identity monitoring services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(73 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-554353
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 16, 2022
Raw hash: b42f3fadd30bc838cc8de30e7c18901aa0b1f9b33752db7a505be4ff6fc18843

Reporting entityGreenheart Farms, Inc.

Victim entityGreenheart Farms, Inc.

Incidentdiscovered Apr 4, 2022

Stated responseSecured the account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov