Burnt Ridge Nursery and Orchards, Inc.

Burnt Ridge Nursery and Orchards, Inc. reported an external system breach involving malware (ransomware) on September 18, 2020, discovered on February 1, 2022. The incident affected 11,734 individuals, including 118 Maine residents. Personal information and financial account numbers were compromised. Electronic notifications were sent to affected individuals on August 15, 2022.

Affected (this filing): 11,734

Burnt Ridge Nursery and Orchards, Inc. disclosed a data security incident involving malware on a third-party e-commerce vendor's server. The malware captured payment card information (cardholder name, number, security code, expiration date) for customers who made purchases between September 18, 2020, and February 3, 2022. The vendor identified the malware in early February 2022, removed it, engaged forensic experts, and notified federal law enforcement and payment card companies. The incident is contained.