SCUF Gaming International LLC

The Washington State Office of the Attorney General reported that SCUF Gaming International, LLC experienced a data breach from February 3, 2021, to March 16, 2021. The breach occurred due to unauthorized access using third-party vendor credentials, potentially affecting 691 individuals. The compromised information included cardholder name, email address, billing address, credit card number, expiration date, and CVV.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=11207

TPRM report: https://www.rankiteo.com/company/scuf-gaming

"id": "scu745080425",
"linkid": "scuf-gaming",
"type": "Breach",
"date": "2/2021",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': 691,
                        'industry': 'Gaming',
                        'name': 'SCUF Gaming International, LLC',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'number_of_records_exposed': 691,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Cardholder Name',
                                              'Email Address',
                                              'Billing Address',
                                              'Credit Card Number',
                                              'Expiration Date',
                                              'CVV']},
 'date_detected': '2021-03-16',
 'description': 'SCUF Gaming International, LLC experienced a data breach due '
                'to unauthorized access using third-party vendor credentials, '
                'potentially affecting 691 individuals.',
 'impact': {'data_compromised': ['Cardholder Name',
                                 'Email Address',
                                 'Billing Address',
                                 'Credit Card Number',
                                 'Expiration Date',
                                 'CVV']},
 'initial_access_broker': {'entry_point': 'Third-party Vendor Credentials'},
 'post_incident_analysis': {'root_causes': 'Unauthorized Access using '
                                           'Third-party Vendor Credentials'},
 'references': [{'source': 'Washington State Office of the Attorney General'}],
 'title': 'SCUF Gaming International Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Third-party Vendor Credentials'}