HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowContained
Amana Meat Shop & Smokehouse
bd_e83e1811170efe78 · schema v1 · pii pii-v1
Full breach record for Amana Meat Shop & Smokehouse →Amana Meat Shop & Smokehouse notified customers of a data breach involving third-party e-commerce provider CommmerceV3, Inc. Unauthorized access to CommmerceV3's systems occurred between November 24, 2021, and December 14, 2022. The company was alerted on June 6, 2023. Exposed data included names, email addresses, billing addresses, payment card numbers, CVV codes, and expiration dates. The incident did not affect Amana Meat Shop's internal network.
California clockDiscovered Jun 6, 2023 → Notified Sep 13, 202399d ✗ CA 60-day late15 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_45bded74c883c336New Hampshire State AGfiled 2023-09-20Verified
- bd_6039a6044f959112Maine State AGfiled 2023-09-20Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-573904
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 20, 2023
- Raw hash
- 1c22d2279e16749a6cabe5e1e77e30d0bb8c6d7341c642de4119a2161b3b403e
Reporting entity
- Name
- Amana Meat Shop & Smokehousenorm: amana meat shop smokehouse
Victim entity
- Name
- Amana Meat Shop & Smokehousenorm: amana meat shop smokehouse
Incident
- Discovered
- Jun 6, 2023
- Materiality determined
- —
- Notification sent
- Sep 13, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via CommmerceV3, Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 15 weeks(106 days from discovery to filing)
- Compliance flags
- CA 60-day late · 99d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 6, 2023→ Notified: Sep 13, 202399d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.