Manduka

The Washington State Office of the Attorney General reported a data breach involving Manduka on March 27, 2018. The breach occurred on February 25, 2018, due to unauthorized malware installation on Manduka's e-commerce web platform, affecting 1,634 Washington residents and compromising customer payment card information including names, card numbers, expiration dates, and security codes.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=9775

TPRM report: https://www.rankiteo.com/company/manduka

"id": "man245072725",
"linkid": "manduka",
"type": "Breach",
"date": "2/2018",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 1634,
                        'industry': 'E-commerce',
                        'location': 'Washington',
                        'name': 'Manduka',
                        'type': 'Company'}],
 'attack_vector': 'Malware',
 'data_breach': {'data_exfiltration': True,
                 'number_of_records_exposed': 1634,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['payment card information']},
 'date_detected': '2018-02-25',
 'date_publicly_disclosed': '2018-03-27',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach involving Manduka on March 27, 2018. The breach '
                'occurred on February 25, 2018, due to unauthorized malware '
                "installation on Manduka's e-commerce web platform, affecting "
                '1,634 Washington residents and compromising customer payment '
                'card information including names, card numbers, expiration '
                'dates, and security codes.',
 'impact': {'data_compromised': ['names',
                                 'card numbers',
                                 'expiration dates',
                                 'security codes'],
            'payment_information_risk': True,
            'systems_affected': ['e-commerce web platform']},
 'references': [{'date_accessed': '2018-03-27',
                 'source': 'Washington State Office of the Attorney General'}],
 'title': 'Manduka Data Breach',
 'type': 'Data Breach'}