East Shore Specialty Foods

The Vermont Office of the Attorney General disclosed a data breach affecting East Shore Specialty Foods, which occurred between November 24, 2021, and December 14, 2022. The incident compromised customer payment card information, including highly sensitive details such as names, billing addresses, payment card numbers, CVV codes, and expiration dates. While the breach had a limited geographical scope impacting approximately four individuals in Rhode Island the exposure of full payment card data (including CVV codes) poses a severe risk of fraudulent transactions, identity theft, and financial harm to those affected. The prolonged duration of the breach (over a year) suggests potential vulnerabilities in the company’s payment processing or data security systems, raising concerns about compliance with payment card industry (PCI) standards. Though the number of victims is small, the nature of the stolen data makes this a high-stakes incident for the affected individuals, as CVV codes are typically required for unauthorized card-not-present transactions.

Source: https://ago.vermont.gov/document/2023-10-26-east-shore-specialty-foods-commercev3-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/east-shore-specialty-foods-inc-

"id": "eas031091825",
"linkid": "east-shore-specialty-foods-inc-",
"type": "Breach",
"date": "11/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '4 (in Rhode Island)',
                        'industry': 'Food/Specialty Foods',
                        'name': 'East Shore Specialty Foods',
                        'type': 'Company'}],
 'data_breach': {'number_of_records_exposed': '4 (reported in Rhode Island)',
                 'personally_identifiable_information': ['names',
                                                         'billing addresses'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['payment card information',
                                              'personally identifiable '
                                              'information (PII)']},
 'date_publicly_disclosed': '2023-10-26',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving East Shore Specialty Foods. The breach '
                'impacted customer payment card information, including names, '
                'billing addresses, payment card numbers, CVV codes, and '
                'expiration dates. Approximately four individuals in Rhode '
                'Island may have been affected.',
 'impact': {'data_compromised': ['names',
                                 'billing addresses',
                                 'payment card numbers',
                                 'CVV codes',
                                 'expiration dates'],
            'identity_theft_risk': 'High (payment card details exposed)',
            'payment_information_risk': 'High (full payment card details '
                                        'exposed)'},
 'references': [{'date_accessed': '2023-10-26',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Vermont Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Public disclosure via Vermont Office '
                                        'of the Attorney General'},
 'title': 'Data Breach at East Shore Specialty Foods',
 'type': 'Data Breach'}