Blundstone (U.S.A.) Inc.

The Vermont Office of the Attorney General reported on November 28, 2024, that Blundstone (U.S.A.) Inc. experienced a data breach on November 12, 2024, due to unauthorized access that exploited a plug-in on their e-commerce platform. The breach potentially exposed personal information, including names, addresses, phone numbers, and payment card information, although the total number of individuals affected is unknown.

Source: https://ago.vermont.gov/document/2024-11-28-blundstone-usa-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/blundstone-usa

"id": "blu321072625",
"linkid": "blundstone-usa",
"type": "Breach",
"date": "11/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Retail',
                        'location': 'United States',
                        'name': 'Blundstone (U.S.A.) Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'personally_identifiable_information': ['Names',
                                                         'Addresses',
                                                         'Phone Numbers'],
                 'type_of_data_compromised': ['Names',
                                              'Addresses',
                                              'Phone Numbers',
                                              'Payment Card Information']},
 'date_detected': '2024-11-12',
 'date_publicly_disclosed': '2024-11-28',
 'description': 'Unauthorized access exploited a plug-in on the e-commerce '
                'platform, potentially exposing personal information including '
                'names, addresses, phone numbers, and payment card '
                'information.',
 'impact': {'data_compromised': ['Names',
                                 'Addresses',
                                 'Phone Numbers',
                                 'Payment Card Information']},
 'references': [{'date_accessed': '2024-11-28',
                 'source': 'Vermont Office of the Attorney General'}],
 'title': 'Blundstone (U.S.A.) Inc. Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Plug-in on e-commerce platform'}