Guidecraft, Inc.

Guidecraft, Inc. suffered a data breach reported by the California Office of the Attorney General on March 23, 2023, stemming from unauthorized access between September 21, 2021, and December 30, 2022. The incident exposed sensitive customer information, including names, billing/shipping addresses, and credit/debit card numbers. Approximately 36 Rhode Island residents were among those affected. The breach involved financial data, raising concerns over potential fraud and identity theft risks. While the exact method of intrusion remains undisclosed, the prolonged exposure window suggests a sustained vulnerability. The compromised payment card details align with financial fraud risks, though no evidence of large-scale misuse has been confirmed. The breach underscores the company’s failure to detect or mitigate the intrusion promptly, exacerbating reputational and regulatory repercussions. Customers impacted may face heightened scrutiny for fraudulent transactions, while Guidecraft faces potential legal penalties under data protection laws like CCPA (California Consumer Privacy Act).

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-564678

TPRM report: https://www.rankiteo.com/company/guidecraft-usa

"id": "gui951091725",
"linkid": "guidecraft-usa",
"type": "Breach",
"date": "9/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '36 (Rhode Island residents)',
                        'name': 'Guidecraft, Inc.',
                        'type': 'Company'}],
 'data_breach': {'data_exfiltration': 'Yes',
                 'number_of_records_exposed': '36 (Rhode Island residents, '
                                              'total unknown)',
                 'personally_identifiable_information': ['Names',
                                                         'Billing addresses',
                                                         'Shipping addresses'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Payment Information']},
 'date_detected': '2023-03-23',
 'date_publicly_disclosed': '2023-03-23',
 'description': 'The California Office of the Attorney General reported that '
                'Guidecraft, Inc. experienced a data breach involving '
                'unauthorized access to customer information. The breach '
                'affected customer names, billing and shipping addresses, and '
                'credit or debit card numbers. Approximately 36 Rhode Island '
                'residents were impacted.',
 'impact': {'data_compromised': ['Customer names',
                                 'Billing and shipping addresses',
                                 'Credit or debit card numbers'],
            'identity_theft_risk': 'High (PII and payment data exposed)',
            'payment_information_risk': 'High (Credit/debit card numbers '
                                        'exposed)'},
 'references': [{'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['California Office of '
                                                        'the Attorney '
                                                        'General']},
 'title': 'Guidecraft, Inc. Data Breach (2021-2022)',
 'type': 'Data Breach'}