HackingStolen CredentialsData ExfiltratedSupply Chain (3P Vendor)IDENTITY_BASICLowContained
Daily Choice Products
bd_dc10484cd3f7ae8d · schema v1 · pii pii-v1
Full breach record for Daily Choice Products →My Daily Choice, Inc. notified consumers of a data breach occurring on or around February 15, 2024, involving unauthorized access to a third-party hosted environment. The incident impacted customer names and other personal information. The company investigated with its hosting vendor, restored services, and is reviewing security policies. No identity theft has been confirmed.
Vermont clock✗ VT AG >45 bday16 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_803fc597669176cdCalifornia State AGfiled 2024-06-06Candidate
- bd_9c51eac988162a63New Hampshire State AGfiled 2024-06-06Verified
- bd_afd9c4c3dcdb55a8Maine State AGfiled 2024-06-06Verified
- bd_d74f2efcb22761caIndiana State AGfiled 2024-06-05(1d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-06-06-my-daily-choice-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 6, 2024
- Raw hash
- 003d6a6636124ecc645f22169f2992d0b2866400a67212bfae2875019ad9ff2b
Reporting entity
- Name
- Daily Choice Productsnorm: daily choice products
- Domain
- dailychoiceproducts.com
Victim entity
- Name
- Daily Choice Productsnorm: daily choice products
- Domain
- dailychoiceproducts.com
Incident
- Discovered
- Feb 15, 2024
- Materiality determined
- —
- Notification sent
- Jun 6, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified applicable regulatory authorities where necessary
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 16 weeks(112 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.