Epik Holdings, Inc.

The Washington State Office of the Attorney General reported a data breach involving Epik Holdings, Inc. on September 22, 2021. The breach, discovered on September 15, 2021, involved unauthorized access to backup copies of personal information, affecting approximately 2,040 individuals and potentially exposing names, email addresses, usernames, passwords, transaction history, and credit card information.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=11011

TPRM report: https://www.rankiteo.com/company/epik.com

"id": "epi346072725",
"linkid": "epik.com",
"type": "Breach",
"date": "9/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 2040,
                        'name': 'Epik Holdings, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 2040,
                 'personally_identifiable_information': ['names',
                                                         'email addresses'],
                 'type_of_data_compromised': ['names',
                                              'email addresses',
                                              'usernames',
                                              'passwords',
                                              'transaction history',
                                              'credit card information']},
 'date_detected': '2021-09-15',
 'date_publicly_disclosed': '2021-09-22',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach involving Epik Holdings, Inc. on September 22, '
                '2021. The breach, discovered on September 15, 2021, involved '
                'unauthorized access to backup copies of personal information, '
                'affecting approximately 2,040 individuals and potentially '
                'exposing names, email addresses, usernames, passwords, '
                'transaction history, and credit card information.',
 'impact': {'data_compromised': ['names',
                                 'email addresses',
                                 'usernames',
                                 'passwords',
                                 'transaction history',
                                 'credit card information']},
 'references': [{'date_accessed': '2021-09-22',
                 'source': 'Washington State Office of the Attorney General'}],
 'title': 'Data Breach at Epik Holdings, Inc.',
 'type': 'Data Breach'}