CBD Industries, LLC

The Maine Office of the Attorney General disclosed a data breach affecting CBD Industries, LLC, which occurred between March 30, 2020, and May 18, 2020, due to an external system hacking incident. The breach compromised sensitive financial data of 42,694 individuals, including 192 Maine residents. The exposed information included financial account numbers, credit/debit card numbers, and security codes, posing a significant risk of fraud and financial exploitation. While the exact method of the breach was not detailed, the incident highlights vulnerabilities in the company’s external systems, leading to unauthorized access by malicious actors. The exposure of payment card details, particularly with security codes, increases the likelihood of fraudulent transactions, identity theft, and reputational damage for the affected individuals and the company. No evidence was provided regarding broader operational disruptions or additional data types (e.g., personal health records) being compromised.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/e05f18fe-bb4b-4118-ab0e-e393c7a17d0f.shtml

TPRM report: https://www.rankiteo.com/company/cheef-holdings

"id": "che421090725",
"linkid": "cheef-holdings",
"type": "Cyber Attack",
"date": "3/2020",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': 42694,
                        'name': 'CBD Industries, LLC',
                        'type': 'Company'}],
 'attack_vector': 'External System Breach (Hacking)',
 'data_breach': {'number_of_records_exposed': 42694,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Financial account numbers',
                                              'Credit/debit card numbers',
                                              'Security codes']},
 'date_publicly_disclosed': '2021-02-23',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving CBD Industries, LLC. The breach occurred '
                'between March 30, 2020, and May 18, 2020, due to an external '
                'system breach (hacking), affecting 42,694 individuals, '
                'including 192 Maine residents. Compromised information '
                'includes financial account numbers or credit/debit card '
                'numbers in combination with security codes.',
 'impact': {'data_compromised': ['Financial account numbers',
                                 'Credit/debit card numbers',
                                 'Security codes'],
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High'},
 'references': [{'date_accessed': '2021-02-23',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'title': 'Data Breach at CBD Industries, LLC',
 'type': 'Data Breach'}