The Vermont Office of the Attorney General reported that General Wax & Candle Company experienced a data breach involving unauthorized access to customer payment card data on May 10, 2023. The breach affected transactions made between February 16, 2023, and March 2, 2023, compromising customer names, contact information, credit or debit card numbers, expiration dates, and CVV numbers. The number of individuals affected is currently unknown.
Source: https://ago.vermont.gov/document/2023-05-10-general-wax-candle-company-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/generalwax
"id": "gen906072925",
"linkid": "generalwax",
"type": "Breach",
"date": "2/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 'Unknown',
'industry': 'Retail',
'name': 'General Wax & Candle Company',
'type': 'Retail'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'number_of_records_exposed': 'Unknown',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Customer names',
'Contact information',
'Credit or debit card numbers',
'Expiration dates',
'CVV numbers']},
'date_detected': '2023-05-10',
'description': 'Unauthorized access to customer payment card data.',
'impact': {'data_compromised': ['Customer names',
'Contact information',
'Credit or debit card numbers',
'Expiration dates',
'CVV numbers'],
'payment_information_risk': 'High'},
'references': [{'date_accessed': '2023-05-10',
'source': 'Vermont Office of the Attorney General'}],
'title': 'General Wax & Candle Company Data Breach',
'type': 'Data Breach'}