Burnt Ridge Nursery and Orchards, Inc.

Burnt Ridge Nursery and Orchards, Inc. reported an external system breach involving malware (ransomware) on September 18, 2020, discovered on February 1, 2022. The incident affected 11,734 individuals, including 118 Maine residents. Personal information and financial account numbers were compromised. Electronic notifications were sent to affected individuals on August 15, 2022.

Burnt Ridge Nursery and Orchards, Inc. reported a data breach to the Montana Attorney General. The breach was reported on 2022-08-16. The breach occurred from 9/18/2020 to 2/3/2022. 108 Montana residents were affected.

Burnt Ridge Nursery and Orchards, Inc. disclosed a data security incident involving malware on a third-party e-commerce vendor's server. The malware captured payment card information (cardholder name, number, security code, expiration date) for customers who made purchases between September 18, 2020, and February 3, 2022. The vendor identified the malware in early February 2022, removed it, engaged forensic experts, and notified federal law enforcement and payment card companies. The incident is contained.

Burnt Ridge Nursery and Orchards, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2022-08-16. The breach occurred during 9/18/2020 - 2/3/2022. The breach was discovered on 2/1/2022. 11,734 individuals were affected. Notice was sent on 8/15/2022.

Burnt Ridge Nursery and Orchards, Inc., a business sector entity reported a malware incident to the Washington Attorney General. The organization became aware of the incident on 2022-03-03 and filed notice on 2022-08-16. 2,619 Washington residents were affected. 166 days elapsed between awareness and notification. 531 days to identify the breach. 0 days to contain the breach.