HackingVulnerability ExploitZero-DayData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumActive
Garden of Life, LLC
bd_ef65a6f54dd21f0e · schema v1 · pii pii-v1
Full breach record for Garden of Life, LLC →Garden of Life, LLC notified consumers of a data breach where an unauthorized third party exploited a previously unknown vulnerability in Oracle E-Business Suite to access personal data (names, addresses, SSNs) of employees, contractors, and business partners. The incident occurred in August 2025 and was discovered in November 2025. Garden of Life applied patches, secured systems, and is offering 24 months of identity theft protection services.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_01940a2f5f309076Indiana State AGfiled 2025-12-04(30d gap)Verified
- bd_526e3fb4468ed092New Hampshire State AGfiled 2025-12-12(38d gap)Verified
- bd_f032b1f7c39531faMaine State AGfiled 2025-12-12(38d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-11-04-garden-life-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 4, 2025
- Raw hash
- 2c106bbeca2ac136cf5b7691f262d98b48890e6aae6d20f072545525038a6d2a
Reporting entity
- Name
- Garden of Life, LLCnorm: garden of life
- Domain
- gardenoflife.com
Victim entity
- Name
- Garden of Life, LLCnorm: garden of life
- Domain
- gardenoflife.com
Incident
- Discovered
- —
- Materiality determined
- Nov 14, 2025
- Notification sent
- Dec 4, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.