Roots & Harvest Direct LLC

Roots & Harvest Direct LLC reported a data breach affecting 26 Maine residents after a cybersecurity incident at its third-party e-commerce vendor, CommerceV3. The incident occurred between November 24, 2021, and December 14, 2022, and was discovered on June 6, 2023. The compromised data includes names and financial account or credit/debit card numbers, along with security codes, access codes, or passwords.

Roots & Harvest Direct LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-07-13. 66 Massachusetts residents were affected. The report records the breach type as electronic.

Roots & Harvest Direct LLC notified the NH Attorney General of a third-party vendor breach involving CommerceV3. Unauthorized access to CommerceV3's systems occurred between Nov 24, 2021 and Dec 14, 2022. Cardholder data for 27 NH residents was potentially accessed. Notification letters were mailed on July 13, 2023.

Roots & Harvest Direct LLC notified customers that its third-party e-commerce platform provider, CommerceV3, experienced unauthorized access to systems between Nov 2021 and Dec 2022. Cardholder data including names, emails, billing addresses, card numbers, and CVVs were potentially accessed. CommerceV3 conducted forensic investigations and implemented additional security measures.

Roots & Harvest Direct LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2021-11-24 and was reported on 2023-07-06. 99 Indiana residents were affected. 4,073 individuals affected in total.