The Vermont Office of the Attorney General disclosed a data breach targeting Dr. Bronner’s (operating under All One God Faith Inc.) on July 11, 2024. The incident involved unauthorized network access between May 24 and May 25, 2024, exposing personal information of an undisclosed number of individuals. Compromised data includes full names, though the full scope of the breach such as whether financial, medical, or additional sensitive details were accessed remains unconfirmed. The breach highlights vulnerabilities in the company’s cybersecurity defenses, raising concerns over potential misuse of the exposed data, including identity theft or phishing attacks. While no immediate financial or operational disruptions were reported, the incident underscores the risks of third-party data exposure and the need for enhanced monitoring and transparency. The company has not yet clarified whether the breach stemmed from a targeted cyber attack, insider threat, or exploitation of an unpatched vulnerability. Regulatory scrutiny and customer notifications are expected as investigations proceed.
Source: https://ago.vermont.gov/document/2024-07-11-all-one-god-faith-dba-dr-bronners
TPRM report: https://www.rankiteo.com/company/one-god-one-faith-ministries
"id": "one944091725",
"linkid": "one-god-one-faith-ministries",
"type": "Breach",
"date": "5/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Unknown',
'name': "All One God Faith Inc. dba Dr. Bronner's",
'type': 'Company'}],
'data_breach': {'number_of_records_exposed': 'Unknown',
'personally_identifiable_information': ['Full names'],
'sensitivity_of_data': 'Moderate',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)']},
'date_publicly_disclosed': '2024-07-11',
'description': 'The Vermont Office of the Attorney General reported a data '
"breach involving All One God Faith Inc. dba Dr. Bronner's. "
'Unauthorized access to their network occurred between May 24 '
'and May 25, 2024, potentially compromising personal '
'information including full names; the exact number of '
'individuals affected is currently unknown.',
'impact': {'data_compromised': ['Full names'],
'identity_theft_risk': 'Potential'},
'investigation_status': 'Ongoing',
'references': [{'date_accessed': '2024-07-11',
'source': 'Vermont Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
'Attorney General']},
'title': "Data Breach at Dr. Bronner's (All One God Faith Inc.)",
'type': 'Data Breach'}