The Vermont Office of the Attorney General disclosed a data breach affecting 32 Bar Blues, an online platform (32BarBlues.com). The incident, reported on October 6, 2022, involved the potential exposure of payment card information belonging to customers who made transactions on the website between September 2020 and February 3, 2022. A total of 386 Rhode Island residents were impacted, with their financial details such as credit/debit card numbers, expiration dates, and possibly CVV codes compromised due to an unauthorized access or security vulnerability in the payment processing system. While the exact method of the breach (e.g., malware, skimming, or third-party vendor compromise) was not specified, the exposure of payment card data poses significant risks, including fraudulent transactions, identity theft, and financial losses for affected individuals. The company likely faced reputational damage, potential regulatory scrutiny, and the need for customer notifications, credit monitoring services, and system remediation. The breach highlights vulnerabilities in e-commerce security, particularly in safeguarding sensitive financial data during online transactions.
Source: https://ago.vermont.gov/document/2022-10-06-32-bar-blues-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/32-bar-blues
"id": "32-702100325",
"linkid": "32-bar-blues",
"type": "Breach",
"date": "9/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': '386 (Rhode Island residents)',
'industry': 'Retail (Apparel)',
'name': '32 Bar Blues',
'type': 'Business'}],
'data_breach': {'data_exfiltration': 'Potential',
'number_of_records_exposed': '386 (Rhode Island residents)',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Payment card information'},
'date_publicly_disclosed': '2022-10-06',
'description': 'The Vermont Office of the Attorney General reported a data '
'breach involving 32 Bar Blues on October 6, 2022. The breach '
'potentially exposed payment card information of individuals '
'who used a card on 32BarBlues.com between September 2020 and '
'February 3, 2022, affecting 386 Rhode Island residents.',
'impact': {'data_compromised': ['Payment card information'],
'identity_theft_risk': 'Potential',
'payment_information_risk': 'Exposed',
'systems_affected': ['32BarBlues.com']},
'references': [{'date_accessed': '2022-10-06',
'source': 'Vermont Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
'Attorney General']},
'title': 'Data Breach at 32 Bar Blues Affecting Payment Card Information',
'type': 'Data Breach'}