Vermont Nut Free Chocolates
ent_4ed7d550b4b5417a9380dd04
Disclosures
7
State AG · 7 jurisdictions
Multi-filing incidents
2
incidents joining 2+ filings here
Max affected reported
26,219
nationwide · State AG ME
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Vermont Nut Free Chocolates
- Normalized
- vermont nut free chocolates— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- vermontnutfree.com
Disclosure history (7)newest first
- New Hampshire State AGas victim2022-09-06
Vermont Nut Free Chocolates notified NH AG of a breach at third-party vendor Freestyle Solutions involving malware. Unauthorized access to payment card data (names, card numbers, CVV, billing addresses) occurred between Sept 2020 and Feb 2022. 468 NH residents affected. Notifications sent Aug 29, 2022. D2C processing moved away from vendor.
- Washington State AGas victim2022-09-01
Vermont Nut Free Chocolates notified the Washington AG of a third-party vendor (Freestyle Solutions) malware incident affecting 521 Washington residents. Unauthorized access occurred between Sept 2020 and Feb 2022, exposing payment card info, names, and billing addresses. Notification to residents began Aug 29, 2022.
- California State AGas victim2022-09-01
Vermont Nut Free Chocolates notified customers of a data breach involving a third-party vendor, Freestyle Solutions. Malware on the vendor's server potentially exposed payment card information for purchases made between September 18, 2020, and February 3, 2022. The vendor discovered the malware and removed it, notifying Vermont Nut Free Chocolates on July 29, 2022. The company engaged cybersecurity experts and notified law enforcement. 236 Rhode Island residents were explicitly mentioned as impacted.
- Maine State AGas victim2022-09-01
Vermont Nut Free Chocolates experienced an external system breach, where an unauthorized party gained access to its systems. The breach, which occurred on September 18, 2020, was discovered on July 29, 2022. The compromised information includes names and financial account numbers or credit/debit card numbers with their security codes. A total of 238 Maine residents were affected.
- Massachusetts State AGas victim2022-09-01
Vermont Nut Free Chocolates reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-09-01. 2,686 Massachusetts residents were affected. The report records the breach type as electronic.
- Montana State AGas victim2022-08-31
Vermont Nut Free Chocolates notified customers that a third-party payment processor, Freestyle Solutions, experienced a malware incident. Unauthorized parties may have acquired payment card information from purchases made between Sept 18, 2020 and Feb 3, 2022. The incident was discovered on July 29, 2022. Notices were sent on Aug 29, 2022. 236 Rhode Island residents were impacted.
- Indiana State AGas victim2022-08-29
Vermont Nut Free Chocolates reported a data breach to the Indiana Attorney General. The breach occurred on 2020-09-18 and was reported on 2022-08-29. 332 Indiana residents were affected. 26,219 individuals affected in total.
Supply-chain cascadesreviewed and confirmed
- Vermont Nut Free Chocolates’s filing is one of at least 12 in the FreeStyle Solutions supply-chain incident (2022).