On September 6, 2020, the California Office of the Attorney General reported a data breach involving Promo.com Ltd. The breach occurred between June 22 and June 25, 2020, due to a vulnerability in a third-party service, affecting customer account information excluding financial data, such as first names, last names, email addresses, and other personal identifiers. The exact number of individuals affected is currently unknown.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-193800
TPRM report: https://www.rankiteo.com/company/promodotcom
"id": "pro1028072525",
"linkid": "promodotcom",
"type": "Breach",
"date": "6/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'name': 'Promo.com Ltd.', 'type': 'Company'}],
'attack_vector': 'Vulnerability in a third-party service',
'data_breach': {'personally_identifiable_information': True,
'type_of_data_compromised': ['first names',
'last names',
'email addresses',
'other personal identifiers']},
'date_detected': '2020-06-22',
'date_publicly_disclosed': '2020-09-06',
'description': 'A data breach involving Promo.com Ltd. occurred between June '
'22 and June 25, 2020, due to a vulnerability in a third-party '
'service, affecting customer account information excluding '
'financial data.',
'impact': {'data_compromised': ['first names',
'last names',
'email addresses',
'other personal identifiers']},
'references': [{'date_accessed': '2020-09-06',
'source': 'California Office of the Attorney General'}],
'title': 'Promo.com Ltd. Data Breach',
'type': 'Data Breach'}