Easy Breathe, Inc.

On January 4, 2017, Easy Breathe, Inc. suffered a data breach that exposed sensitive customer information, including names and payment card details. The incident was disclosed via a notification letter issued on March 27, 2017, though the exact number of affected individuals remains undisclosed. The breach involved unauthorized access to financial data, posing risks of fraudulent transactions, identity theft, and reputational harm to the company. Payment card information, if misused, could lead to direct financial losses for customers, while the exposure of personal identifiers heightens the potential for targeted phishing or social engineering attacks. The delay in public notification over two months may have further exacerbated vulnerabilities, leaving customers unprotected during the interim. This incident underscores the critical need for robust cybersecurity measures, particularly for businesses handling payment data, as such breaches erode trust and can trigger regulatory scrutiny under data protection laws like California’s.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-67162

TPRM report: https://www.rankiteo.com/company/easy-breathe-inc-

"id": "eas550091725",
"linkid": "easy-breathe-inc-",
"type": "Breach",
"date": "1/2017",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Unknown',
                        'location': 'California, USA',
                        'name': 'Easy Breathe, Inc.',
                        'type': 'Company'}],
 'customer_advisories': 'Notification letter issued on March 27, 2017',
 'data_breach': {'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': 'Yes (customer names)',
                 'sensitivity_of_data': 'High (PII and payment data)',
                 'type_of_data_compromised': ['Customer names',
                                              'Payment card information']},
 'date_detected': '2017-01-04',
 'date_publicly_disclosed': '2017-03-27',
 'description': 'The California Office of the Attorney General reported that '
                'Easy Breathe, Inc. experienced a data breach on January 4, '
                '2017. The breach potentially exposed customer names and '
                'payment card information, affecting an unknown number of '
                'individuals.',
 'impact': {'data_compromised': ['Customer names', 'Payment card information'],
            'identity_theft_risk': 'Potential (due to exposed PII)',
            'payment_information_risk': 'High (payment card information '
                                        'exposed)'},
 'references': [{'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'California Office of '
                                                       'the Attorney General'},
 'response': {'communication_strategy': 'Notification letter issued to '
                                        'affected individuals'},
 'title': 'Easy Breathe, Inc. Data Breach (2017)',
 'type': 'Data Breach'}