HackingRetail & ConsumerRetailStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Financial accountFinancial credentialsLowContained

East Shore Specialty Foods

bd_e87dc4df2c9aad1c · schema v1 · pii pii-v1

Severity

Low

Discovered

May 3, 2023

Filed

Oct 26, 2023

To disclose

25 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

67%

Full breach record for East Shore Specialty Foods →2 incidents on file

East Shore Specialty Foods notified consumers of a data breach affecting its third-party e-commerce platform, CommerceV3. Unauthorized access occurred between Nov 2021 and Dec 2022, exposing names, billing addresses, and full payment card details (number, CVV, expiration). The company is offering credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday25 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 525 days

discovery → filing · 25 weeks / 176 days

Nov 24, 2021

Begins

May 3, 2023

Discovered

Oct 26, 2023

Filed

vs. sector median

+18 wks slower

This filing is one of 3 about the same incident.View merged incident

Part of CommerceV3 supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_962a01b244eb41582023-10-26Candidate
Indiana State AGbd_bd1403a134868a2f2023-10-26Verified

Name: East Shore Specialty Foods
norm: east shore specialty foods

Name: East Shore Specialty Foods
norm: east shore specialty foods
Industry: Retail & Consumerllm

Discovered: May 3, 2023
Breach occurred: Nov 24, 2021 – Dec 14, 2022
Undetected for: 525 daysoccurrence → discovery
Materiality determined: Oct 26, 2023
Notification sent: Oct 26, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Financial accountFinancial credentials
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Filed notice with Vermont Attorney General
Third party: via CommerceV3
Initial access: supply_chain

During the incident: Offering credit monitoring to all of its potentially affected customers through Experian
Working to review existing policies and procedures
Implementing additional administrative and technical safeguards
Changes made: Reviewing existing policies and procedures
Implementing additional administrative and technical safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 weeks(176 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGOct 26 · first

Indiana State AGOct 26 · first

Vermont State AGOct 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-10-26-east-shore-specialty-foods-commercev3-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 26, 2023
Raw hash: 257ffcbfcdd0bc4e54f10fd202b02e426a60b97cad99bfff53a8b85ef4315c4a

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityEast Shore Specialty Foods

Victim entityEast Shore Specialty Foods

Incidentdiscovered May 3, 2023

Stated responseOffering credit monitoring to all of its potentially affected customers through Experian

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov