International E-Z UP, Inc.

The California Office of the Attorney General reported a data breach involving International E-Z UP, Inc. on January 11, 2019. The breach occurred between May 11, 2018, and August 2, 2018, due to malicious code inserted into their e-commerce site, potentially affecting customer payment information including names, credit card numbers, CVVs, and expiration dates.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-143759

TPRM report: https://www.rankiteo.com/company/ezupusa

"id": "ezu219072925",
"linkid": "ezupusa",
"type": "Cyber Attack",
"date": "5/2018",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'E-commerce',
                        'location': 'California',
                        'name': 'International E-Z UP, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Malicious Code Injection',
 'data_breach': {'personally_identifiable_information': ['Names'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Payment Information']},
 'date_detected': '2019-01-11',
 'date_publicly_disclosed': '2019-01-11',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving International E-Z UP, Inc. on January 11, '
                '2019. The breach occurred between May 11, 2018, and August 2, '
                '2018, due to malicious code inserted into their e-commerce '
                'site, potentially affecting customer payment information '
                'including names, credit card numbers, CVVs, and expiration '
                'dates.',
 'impact': {'data_compromised': ['Names',
                                 'Credit Card Numbers',
                                 'CVVs',
                                 'Expiration Dates'],
            'payment_information_risk': 'High',
            'systems_affected': ['E-commerce Site']},
 'initial_access_broker': {'entry_point': 'E-commerce Site'},
 'motivation': 'Financial Gain',
 'post_incident_analysis': {'root_causes': 'Malicious Code Injection'},
 'references': [{'date_accessed': '2019-01-11',
                 'source': 'California Office of the Attorney General'}],
 'title': 'Data Breach at International E-Z UP, Inc.',
 'type': 'Data Breach',
 'vulnerability_exploited': 'E-commerce Site Vulnerability'}