The Vermont Office of the Attorney General reported a data breach involving Essential Wholesale & Labs on February 22, 2023. The breach occurred on May 22, 2022, due to unauthorized code on the company’s website, potentially exposing customer names, shipping addresses, payment card information, and email addresses. Approximately UNKN individuals may have been affected, with 5 residents specifically noted from Rhode Island.
Source: https://ago.vermont.gov/document/2023-02-22-fioravanti-custom-products-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/essential-labs
"id": "ess139072625",
"linkid": "essential-labs",
"type": "Breach",
"date": "4/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 'UNKN',
'name': 'Essential Wholesale & Labs',
'type': 'Company'}],
'attack_vector': 'Unauthorized code on the website',
'data_breach': {'number_of_records_exposed': 'UNKN',
'personally_identifiable_information': ['customer names',
'shipping addresses',
'email addresses'],
'type_of_data_compromised': ['customer names',
'shipping addresses',
'payment card information',
'email addresses']},
'date_detected': '2022-05-22',
'date_publicly_disclosed': '2023-02-22',
'description': 'The Vermont Office of the Attorney General reported a data '
'breach involving Essential Wholesale & Labs on February 22, '
'2023. The breach occurred on May 22, 2022, due to '
'unauthorized code on the company’s website, potentially '
'exposing customer names, shipping addresses, payment card '
'information, and email addresses. Approximately UNKN '
'individuals may have been affected, with 5 residents '
'specifically noted from Rhode Island.',
'impact': {'data_compromised': ['customer names',
'shipping addresses',
'payment card information',
'email addresses']},
'references': [{'date_accessed': '2023-02-22',
'source': 'Vermont Office of the Attorney General'}],
'title': 'Data Breach at Essential Wholesale & Labs',
'type': 'Data Breach'}