HackingRetail & ConsumerRetailCustomer Data InvolvedPIIIdentity (basic)LowContained

Ellsworth Cooperative Creamery

bd_d1e3f6070ba4df5b · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 15, 2024

Filed

Oct 16, 2024

To disclose

31 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Ellsworth Cooperative Creamery →2 incidents on file

Ellsworth Cooperative Creamery notified New Hampshire residents that on or around March 12, 2024, an unknown individual accessed its systems and acquired files. Suspicious activity was detected on March 15, 2024. The incident involved personal information of one NH resident. Ellsworth engaged third-party specialists, notified law enforcement, and offered 24 months of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d31 weeks discovery → filing

Incident timeline

undetected · 3 days

discovery → filing · 31 weeks / 215 days

Mar 12, 2024

Begins

Mar 15, 2024

Discovered

Oct 16, 2024

Filed

vs. sector median

+23 wks slower

This filing is one of 2 about the same incident.View merged incident

A leak claim by blacksuit about this victim predates this filing by 191 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_c9122ee3d372e2572024-10-16Candidate

Name: Ellsworth Cooperative Creamery
norm: ellsworth cooperative creamery
Domain: ellsworthcheese.com

Name: Ellsworth Cooperative Creamery
norm: ellsworth cooperative creamery
Domain: ellsworthcheese.com
Industry: Retail & Consumerllm

Discovered: Mar 15, 2024
Breach occurred: Mar 12, 2024
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 16, 2024
Affected individuals: 1state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified federal law enforcementProvided written notice to relevant state regulators

During the incident: Moved quickly to investigate and respond to the incident
Assessed the security of Ellsworth systems
Identified potentially affected individuals
Notified federal law enforcement regarding the event
Engaged third-party cyber specialists to initiate an investigation
Undertook a comprehensive review of the files with third-party review specialists
Provided access to credit monitoring services through Experian
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Provided written notice to relevant state regulators
Provided written notice to the three major credit reporting agencies
Changes made: Implementing additional safeguards and training to its employees
Evaluating additional technical security measures
Evaluating existing policies and procedures to mitigate reoccurrence
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 31 weeks(215 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGOct 16 · first

New Hampshire State AGOct 16 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ellsworth-cooperative-creamery-20241016.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 16, 2024
Raw hash: fd0995207a486221e5cbd96ef465e31f9ab050b3d0e284fae367efa487307e4d

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityEllsworth Cooperative Creamery

Victim entityEllsworth Cooperative Creamery

Incidentdiscovered Mar 15, 2024

Stated responseMoved quickly to investigate and respond to the incident

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov