Fetch Rewards, Inc.

The Washington State Office of the Attorney General reported a data breach involving Fetch Rewards, Inc. on July 10, 2020. The breach occurred on June 6, 2020, due to unauthorized access resulting from a temporary API code misconfiguration, affecting 128,598 residents. The compromised information included names, email addresses, and dates of birth, while sensitive information was not involved.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=10569

TPRM report: https://www.rankiteo.com/company/adbloom-inc

"id": "adb138072925",
"linkid": "adbloom-inc",
"type": "Breach",
"date": "6/2020",
"severity": "25",
"impact": "1",
"explanation": "Attack without any consequences"

{'affected_entities': [{'customers_affected': 128598,
                        'industry': 'Technology',
                        'name': 'Fetch Rewards, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 128598,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'Low',
                 'type_of_data_compromised': ['names',
                                              'email addresses',
                                              'dates of birth']},
 'date_detected': '2020-06-06',
 'date_publicly_disclosed': '2020-07-10',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach involving Fetch Rewards, Inc. on July 10, 2020. '
                'The breach occurred on June 6, 2020, due to unauthorized '
                'access resulting from a temporary API code misconfiguration, '
                'affecting 128,598 residents. The compromised information '
                'included names, email addresses, and dates of birth, while '
                'sensitive information was not involved.',
 'impact': {'data_compromised': ['names', 'email addresses', 'dates of birth']},
 'references': [{'date_accessed': '2020-07-10',
                 'source': 'Washington State Office of the Attorney General'}],
 'title': 'Fetch Rewards Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Temporary API code misconfiguration'}