GS1 US, Inc.

The Washington State Office of the Attorney General disclosed that GS1 US, Inc. suffered a potential data breach where unauthorized actors gained access to the personal information of 2,384 business entities in Washington. The breach occurred over an extended period, spanning from July 7, 2017, to October 2, 2018, before being detected on October 1, 2018. While the exact nature of the compromised data was not fully detailed, the incident involved the exposure of sensitive business-related personal information, raising concerns over potential misuse, identity theft, or financial fraud targeting the affected entities. The prolonged duration of the breach suggests possible vulnerabilities in GS1 US’s cybersecurity defenses, allowing attackers sustained access without immediate detection. The company was required to notify impacted parties and likely faced regulatory scrutiny, reputational damage, and potential legal repercussions due to the failure to safeguard third-party data effectively.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=10584

TPRM report: https://www.rankiteo.com/company/gs1-us

"id": "gs1034090625",
"linkid": "gs1-us",
"type": "Breach",
"date": "7/2017",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '2,384 business entities',
                        'location': 'Washington, USA',
                        'name': 'GS1 US, Inc.',
                        'type': 'Organization'}],
 'data_breach': {'number_of_records_exposed': '2,384',
                 'personally_identifiable_information': True,
                 'type_of_data_compromised': 'Personal information'},
 'date_detected': '2018-10-01',
 'description': 'The Washington State Office of the Attorney General reported '
                'that GS1 US, Inc. experienced a potential data breach '
                'involving unauthorized access to the personal information of '
                '2,384 business entities in Washington. The breach occurred '
                'between July 7, 2017, and October 2, 2018, and was discovered '
                'on October 1, 2018.',
 'impact': {'data_compromised': 'Personal information of 2,384 business '
                                'entities'},
 'references': [{'source': 'Washington State Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Washington State '
                                                       'Office of the Attorney '
                                                       'General'},
 'title': 'GS1 US, Inc. Potential Data Breach (2017-2018)',
 'type': 'Data Breach'}