Recently, John & Kira’s and Smithfield Specialty Foods each filed a notice of data breach after learning about an incident that occurred at CommerceV3, a company that provides various web-hosting services. In this notice, John & Kira’s and Smithfield Specialty Foods explain that the incident resulted in an unauthorized party being able to access consumers’ sensitive information, which includes their names and payment card information, including card numbers, CVV codes, and expiration dates. After CommerceV3 completed its investigation, it provided John & Kira’s and Smithfield Specialty Foods with a list of compromised data and who it belonged to. In turn, John & Kira’s and Smithfield Specialty Foods began sending out data breach notification letters to all individuals whose information was affected by the recent data security incident.

If you received a data breach notification from John & Kira’s or Smithfield Specialty Foods, it is essential you understand what is at risk and what you can do about it. While the recent data breach didn’t affect either of these companies’ computer systems, it did involve confidential information they provided to CommerceV3. Thus, if you get a data breach notification from either company, it means your information may be in the hands of bad actors looking to steal your identity or commit other frauds against you. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft as well as discuss your legal options following the CommerceV3 data breach. For more information, please see our recent piece on the topic here.

What Caused the CommerceV3 Breach?

The CommerceV3 (“CV3”) data breach was only recently announced, and more information is expected in the near future. However, Smithfield Specialty Foods filed a notice with the Maine Attorney General on June 29, 2023 outlining what occurred.

Evidently, on June 7, 2023, CV3 informed Smithfield that an unauthorized party was able to access certain data from CV3’s computer system. In response, CV3 conducted an investigation and confirmed that the unauthorized party was able to access certain information about Smithfield customers who made purchases on smithfieldmarketplace.com and thepeanutshop.com between November 24, 2021 and December 14, 2022.

After learning that sensitive consumer data was accessible to an unauthorized party, CommerceV3 reviewed the compromised files to determine what information was leaked and which consumers were impacted. While the breached information varies depending on the individual, it may include your name, billing address, email address and payment card information, including your credit or debit card number, expiration date and security code.

On June 29, 2023, Smithfield sent out data breach letters to anyone who was affected by the recent data security incident. These letters should provide victims with a list of which information of theirs was compromised.

John & Kira’s also filed a data breach notice with the Attorney General of Maine. In this notice, the company explains that it was notified of the incident by CV3 on June 12, 2023, and the breach affected customers who made purchases between November 24, 2021, and July 1, 2022.

More Information About CommerceV3

CommerceV3 is an e-commerce software and services provider based out of Minneola, Florida. The company offers product image optimization services, web hosting services, store design services, marketing services, warehousing services and more. CommerceV3 employs more than 25 people and generates approximately $5 million in annual revenue.