Mom’s Meals Breached: Over 1.2 Million Consumers Data Exposed

PurFoods, LLC, operating under the trade name Mom’s Meals, has announced the compromise of personal information affecting its clients and employees. 

The company acknowledged that its cybersecurity defenses had been compromised, allowing unauthorized access to a treasure trove of consumer data.

The incident occurred between January 16, 2023, and February 22, 2023, with the attack involving the encryption of specific files on the company’s network. 

A third-party investigation revealed tools that could facilitate unauthorized data transfer, indicating potential data exfiltration.

The data breach has exposed a trove of sensitive information, including but not limited to:

  • Date of birth
  • Driver’s license/state identification number
  • Financial account information
  • Payment card information
  • Medical record number
  • Medicare and/or Medicaid identification
  • Health information
  • Treatment information
  • Diagnosis code
  • Meal category and/or cost
  • Health insurance information
  • Patient ID number

Less than 1% of the affected population had their Social Security numbers compromised. Total number of persons affected (including residents): 1,237,681

It’s important to emphasize that no evidence suggests misuse or further disclosure of the compromised data in the aftermath of the breach.

“It’s important to note that we have seen no evidence that any personal information was misused or further disclosed as a result of the cyberattack.”

Response and Mitigation

Mom’s Meals has undertaken a series of measures in response to the breach:

  • Notification to federal law enforcement agencies and collaboration with their investigation
  • Notification to affected individuals via U.S. Mail commenced on August 25, 2023
  • Offer of identity theft and fraud protection services, including credit monitoring and identity restoration
  • Engagement of Kroll to manage a call center for inquiries related to the breach

In light of the breach, PurFoods has prioritized reinforcing its network security and an internal review of existing policies and procedures to enhance data protection measures.

The data breach at PurFoods, LLC is a stark reminder of the persistent threats organizations face, even in sectors focused on home-delivered meals. 

Keep informed about the latest Cyber Security News by following us on Google NewsLinkedinTwitter, and Facebook.

Sujatha

Recent Posts

Threat Actors Exploit CI/CD Environments to Gain Unauthorized Access to Restricted Resources

Recent research by Unit 42 highlights critical vulnerabilities in the use of OpenID Connect (OIDC)…

4 minutes ago

Oracle Confirms Breach: Hackers Stole Client Login Credentials

Oracle Corporation has officially confirmed a cybersecurity breach in which hackers infiltrated its systems and…

39 minutes ago

SAP April 2025 Update Fixes Critical Code Injection Vulnerabilities

SAP Security Patch Day has introduced a critical update to address vulnerabilities in SAP products, including…

48 minutes ago

Google to Patch 23-Year-Old Chrome Bug That Leaked Browsing History

Google has announced a groundbreaking update to its Chrome browser that addresses a vulnerability in…

1 hour ago

NIST Declares Pre-2018 CVEs Will Be Labeled as ‘Deferred’

The National Institute of Standards and Technology (NIST) has announced that all Common Vulnerabilities and…

1 hour ago

Threat Actor Leaks Data from Major Bulletproof Hosting Provider Medialand

A threat actor disclosed internal data from Medialand, a prominent bulletproof hosting (BPH) provider long…

4 hours ago