doTERRA International, LLC

The Washington State Office of the Attorney General reported that doTERRA International LLC experienced a data breach involving unauthorized access on March 1, 2016. Approximately 41,485 Washington residents were affected by the breach, which may have compromised names, Social Security numbers, payment card information, dates of birth, and contact details. Notification letters began being sent on April 18, 2016.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=9616

TPRM report: https://www.rankiteo.com/company/d-terra

"id": "d-t613072625",
"linkid": "d-terra",
"type": "Breach",
"date": "3/2016",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 41485,
                        'industry': 'Health and Wellness',
                        'location': 'Washington',
                        'name': 'doTERRA International LLC',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 41485,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'Social Security numbers',
                                              'payment card information',
                                              'dates of birth',
                                              'contact details']},
 'date_detected': '2016-03-01',
 'date_publicly_disclosed': '2016-04-18',
 'description': 'The Washington State Office of the Attorney General reported '
                'that doTERRA International LLC experienced a data breach '
                'involving unauthorized access on March 1, 2016. Approximately '
                '41,485 Washington residents were affected by the breach, '
                'which may have compromised names, Social Security numbers, '
                'payment card information, dates of birth, and contact '
                'details. Notification letters began being sent on April 18, '
                '2016.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 'payment card information',
                                 'dates of birth',
                                 'contact details']},
 'references': [{'source': 'Washington State Office of the Attorney General'}],
 'title': 'doTERRA International LLC Data Breach',
 'type': 'Data Breach'}