HackingRetail & ConsumerManufacturingManufacturingVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedN-DayPIIPCIFINANCIALLowContained
McIlhenny Company
bd_f99b9024ef35081d · schema v1 · pii pii-v1
Full breach record for McIlhenny Company →McIlhenny Company (maker of Tabasco) discovered on July 22, 2024 that a vulnerability in third-party code on its online payment system allowed an unauthorized party to view payment details. Exposed data included names, mailing addresses, email addresses, credit card numbers, expiration dates, and security codes. The breach occurred around July 11, 2024. A patch was promptly applied. 2 Maine residents and 11 total individuals were affected. Notifications were sent on September 5, 2024.
Maine clockDiscovered Jul 22, 2024 → Filed with AG Sep 5, 202445d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c50e82f5-7cfa-4fee-b98d-9b447861c3c3.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 5, 2024
- Raw hash
- 3b97d64ca011c5b97bc4bef65bef0c1c5bc549a95cfea9ee82e0f49af401e406
Reporting entity
- Name
- McIlhenny Companynorm: mcilhenny
- Industry
- Food Manufacturing
Victim entity
- Name
- McIlhenny Companynorm: mcilhenny
- Industry
- Food Manufacturing
- Industry
- Retail & ConsumerllmManufacturingllm
Incident
- Discovered
- Jul 22, 2024
- Materiality determined
- —
- Notification sent
- Sep 5, 2024
- Affected individuals
- 2
- Data types
- PIIPCIFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 6 weeks(45 days from discovery to filing)
- Compliance flags
- ME AG >30d · 45d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 22, 2024→ Filed with AG: Sep 5, 202445d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.