The California Office of the Attorney General reported that Graeter’s Ice Cream Company experienced a data breach on June 28, 2018, with the report made on January 15, 2019. Unauthorized code was added to the checkout page of their website, potentially compromising payment card information for an undisclosed number of individuals.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-143911
TPRM report: https://www.rankiteo.com/company/graeter's-ice-cream
"id": "gra322072725",
"linkid": "graeter's-ice-cream",
"type": "Breach",
"date": "6/2018",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"
{'affected_entities': [{'industry': 'Food and Beverage',
'name': 'Graeter’s Ice Cream Company',
'type': 'Business'}],
'attack_vector': 'Web Application',
'data_breach': {'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Payment Card Information'},
'date_detected': '2018-06-28',
'date_publicly_disclosed': '2019-01-15',
'description': 'Unauthorized code was added to the checkout page of Graeter’s '
"Ice Cream Company's website, potentially compromising payment "
'card information for an undisclosed number of individuals.',
'impact': {'data_compromised': 'Payment Card Information',
'payment_information_risk': 'High',
'systems_affected': 'Website Checkout Page'},
'references': [{'date_accessed': '2019-01-15',
'source': 'California Office of the Attorney General'}],
'title': 'Graeter’s Ice Cream Company Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Unauthorized Code Injection'}