Garden of Life, LLC data breach (2025)

🍁Vermont State AGFirst filinglinked via multistate filing link · 95%

Filed Nov 4, 2025bd_ef65a6f54dd21f0e

Garden of Life, LLC notified consumers of a data breach where an unauthorized third party exploited a previously unknown vulnerability in Oracle E-Business Suite to access personal data (names, addresses, SSNs) of employees, contractors, and business partners. The incident occurred in August 2025 and was discovered in November 2025. Garden of Life applied patches, secured systems, and is offering 24 months of identity theft protection services.

🏎️Indiana State AGlinked via multistate filing link · 95%

⛰️New Hampshire State AGlinked via multistate filing link · 100%

Filed Dec 12, 2025bd_526e3fb4468ed092

Garden of Life, LLC notified the New Hampshire Attorney General of a data breach affecting 4 state residents. An unauthorized third party exploited an unpatched vulnerability in Oracle E-Business Suite between August 9-10, 2025, to access employee and contractor PII (names, SSNs, contact info). The company discovered the incident on November 11, 2025, isolated affected systems, engaged forensic experts, and sent notification letters on December 4, 2025, offering 24 months of identity protection services.

Affected (this filing): 4

🦞Maine State AG

Filed Dec 12, 2025bd_f032b1f7c39531fa

Garden of Life, LLC reported an external system breach (hacking) that occurred on August 9, 2025, and was discovered on November 14, 2025. One Maine resident was affected. The company offered 24 months of identity theft protection services through IDX.

Affected (this filing): 1

ME AG ≤30d · 28d

Garden of Life, LLC

Litigation Timing

Affected residents by state

Timeline