HackingRetail & ConsumerRetailCapture App DataSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIPCIFINANCIALLowContained
Garden of Life, LLC
bd_d58348fb580f2733 · schema v1 · pii pii-v1
Full breach record for Garden of Life, LLC →Garden of Life LLC found on 2024-12-18 that an unknown third party accessed vendor-supplied payment software on its website in July 2024. Exposed data: names, addresses, email, credit/debit card numbers, expiration dates, CVVs. 254 Maine residents among 43,219 total affected. Notifications sent 2025-01-17. IDX 12-month credit monitoring and $1M identity theft insurance offered.
Maine clockDiscovered Dec 18, 2024 → Filed with AG Jan 17, 202530d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_16db60a5ee4cc990Washington State AGfiled 2025-01-17Candidate
- bd_a7462c85743ddfbdNew Hampshire State AGfiled 2025-01-17Verified
- bd_b5e7686779303432Montana State AGfiled 2025-01-17Verified by operator
- bd_c193468e78213729Indiana State AGfiled 2025-01-17Verified
Show 2 more filings ↓Show fewer ↑up to 14d gap
- bd_d26e0355effbbe56California State AGfiled 2025-01-17Verified
- bd_cfdb75a63e580415Oregon State AGfiled 2025-01-31(14d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e09bdd1f-b08f-4816-a842-d953f173e8f0.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 17, 2025
- Raw hash
- 3d807297f41fbb604c7dd597897d07d7fa3fc6545d34cd55a5ccb28d86c581b0
Reporting entity
- Name
- Garden of Life, LLCnorm: garden of life
- Domain
- gardenoflife.com
- Industry
- Other Commercial
Victim entity
- Name
- Garden of Life, LLCnorm: garden of life
- Domain
- gardenoflife.com
- Industry
- Other Commercial
- Industry
- Retail & Consumerllm
Incident
- Discovered
- Dec 18, 2024
- Materiality determined
- —
- Notification sent
- Jan 17, 2025
- Affected individuals
- 254
- Data types
- PIIPCIFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1185 Browser Session HijackingT1056.003 Input Capture: Web Portal Capture
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Dec 18, 2024→ Filed with AG: Jan 17, 202530d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.