HackingRetail & ConsumerRetailStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Financial accountFinancial credentialsLowContained

East Shore Specialty Foods

bd_e87dc4df2c9aad1c · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 26, 2023

To disclose

—

Affected

Not disclosed

Linked

7 filings

Confidence

67%

Full breach record for East Shore Specialty Foods →

East Shore Specialty Foods notified consumers of a data breach affecting its third-party e-commerce platform, CommerceV3. Unauthorized access occurred between Nov 2021 and Dec 2022, exposing names, billing addresses, and full payment card details (number, CVV, expiration). The company is offering credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 24, 2021

Begins

Oct 26, 2023

Filed

This filing is one of 7 filings about the same incident.View merged incident

Part of CommerceV3 supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_72f50472c6f2ec5e2023-10-26Verified by operator
Maine State AGbd_962a01b244eb41582023-10-26Candidate
Montana State AGbd_ac573145ba312ce42023-10-26Verified by operator
Indiana State AGbd_bd1403a134868a2f2023-10-26Verified

Show 2 more filings ↓

New Hampshire State AGbd_c7d2bf282bdae4072023-10-26Verified by operator
Massachusetts State AGbd_e3f2bc97a24ac0802023-10-26Verified by operator

Name: East Shore Specialty Foods
norm: east shore specialty foods

Name: East Shore Specialty Foods
norm: east shore specialty foods
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Nov 24, 2021 – Dec 14, 2022
Materiality determined: —
Notification sent: Oct 26, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Financial accountFinancial credentials
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Filed notice with Vermont Attorney General
Third party: via CommerceV3
Initial access: supply_chain

During the incident: Offering credit monitoring to all of its potentially affected customers through Experian
Working to review existing policies and procedures
Implementing additional administrative and technical safeguards
Changes made: Reviewing existing policies and procedures
Implementing additional administrative and technical safeguards
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

Massachusetts State AGOct 26 · first

Maine State AGOct 26 · first

Montana State AGOct 26 · first

Indiana State AGOct 26 · first

New Hampshire State AGOct 26 · first

Massachusetts State AGOct 26 · first

Vermont State AGOct 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-10-26-east-shore-specialty-foods-commercev3-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 26, 2023
Raw hash: 257ffcbfcdd0bc4e54f10fd202b02e426a60b97cad99bfff53a8b85ef4315c4a

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityEast Shore Specialty Foods

Victim entityEast Shore Specialty Foods

IncidentThird-Party / Supply Chain

Stated responseOffering credit monitoring to all of its potentially affected customers through Experian

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov