Garden of Life, LLC
bd_ef65a6f54dd21f0e · schema v1 · pii pii-v1
Full breach record for Garden of Life, LLC →2 incidents on fileGarden of Life, LLC notified consumers of a data breach where an unauthorized third party exploited a previously unknown vulnerability in Oracle E-Business Suite to access personal data (names, addresses, SSNs) of employees, contractors, and business partners. The incident occurred in August 2025 and was discovered in November 2025. Garden of Life applied patches, secured systems, and is offering 24 months of identity theft protection services.
J jump to incidentP pin to compareR raw source
Incident timeline
Aug 9, 2025
Begins
Nov 4, 2025
Filed
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Sitecl0pbd_ec4c9437f690de472025-11-13 · +10dVerified by operator
Regulatory filings (6) · sorted by filing gap
- Indiana State AGbd_01940a2f5f3090762025-12-04 · +30dVerified
- Nebraska State AGbd_ad8c0255642bf7962025-12-04 · +30dVerified
- Massachusetts State AGbd_174932bce476c8872025-12-12 · +38dVerified by operator
- New Hampshire State AGbd_526e3fb4468ed0922025-12-12 · +38dVerified
Show 2 more filings ↓Show fewer ↑up to 38d gap
- Montana State AGbd_836251fccf324aec2025-12-12 · +38dVerified
- Maine State AGbd_f032b1f7c39531fa2025-12-12 · +38dCandidate
Filing propagation · 7 filings · 7 states
View merged incident ↗Pattern: first filing Nov 4 (VT), last Dec 12 (ME) — a 38-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.