The California Office of the Attorney General reported a data breach involving 310 Nutrition on October 9, 2020. The breach involved unauthorized access attempts to customer order data by two employees of the e-commerce platform Shopify, affecting billing and shipping addresses, email addresses, phone numbers, and partial payment card information. The incident was discovered on September 15, 2020, and was immediately reported to law enforcement.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-194945
TPRM report: https://www.rankiteo.com/company/310-nutrition
"id": "310300072925",
"linkid": "310-nutrition",
"type": "Breach",
"date": "9/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'industry': 'Nutrition',
'name': '310 Nutrition',
'type': 'Company'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'personally_identifiable_information': True,
'type_of_data_compromised': ['billing and shipping addresses',
'email addresses',
'phone numbers',
'partial payment card '
'information']},
'date_detected': '2020-09-15',
'date_publicly_disclosed': '2020-10-09',
'description': 'The California Office of the Attorney General reported a data '
'breach involving 310 Nutrition on October 9, 2020. The breach '
'involved unauthorized access attempts to customer order data '
'by two employees of the e-commerce platform Shopify, '
'affecting billing and shipping addresses, email addresses, '
'phone numbers, and partial payment card information. The '
'incident was discovered on September 15, 2020, and was '
'immediately reported to law enforcement.',
'impact': {'data_compromised': ['billing and shipping addresses',
'email addresses',
'phone numbers',
'partial payment card information']},
'references': [{'date_accessed': '2020-10-09',
'source': 'California Office of the Attorney General'}],
'response': {'law_enforcement_notified': True},
'threat_actor': 'Two employees of Shopify',
'title': 'Data Breach at 310 Nutrition',
'type': 'Data Breach',
'vulnerability_exploited': 'Insider Threat'}