Steel Technology, LLC

In May 2017, Hydro Flask, a subsidiary of Steel Technology LLC, suffered a system disruption that led to a data breach exposing customer personal information. The compromised data included names, billing/shipping addresses, email addresses, and credit card details, though the exact number of affected individuals remains undisclosed. The breach was formally reported by the California Office of the Attorney General on July 28, 2017. While the incident did not involve ransomware or a targeted cyberattack with broader systemic consequences, the exposure of financial and personally identifiable information (PII) posed significant risks to customer privacy and potential fraud. The breach underscored vulnerabilities in Hydro Flask’s data security measures, raising concerns over financial fraud, identity theft, and reputational damage to the brand.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-100667

TPRM report: https://www.rankiteo.com/company/steel-technologies

"id": "ste803082025",
"linkid": "steel-technologies",
"type": "Breach",
"date": "5/2017",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Unknown',
                        'industry': 'Consumer Goods / Retail',
                        'location': 'California, USA',
                        'name': 'Steel Technology LLC (dba Hydro Flask)',
                        'type': 'Private Company'}],
 'data_breach': {'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High (includes PII and payment data)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Payment Card Information']},
 'date_detected': '2017-05-02',
 'date_publicly_disclosed': '2017-07-28',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving Steel Technology LLC, doing business as '
                'Hydro Flask, on July 28, 2017. Hydro Flask experienced a '
                'system disruption on or about May 2, 2017, potentially '
                'compromising customer personal information including names, '
                'billing and shipping addresses, email addresses, and credit '
                'card information, though the exact number of affected '
                'individuals is unknown.',
 'impact': {'data_compromised': ['names',
                                 'billing addresses',
                                 'shipping addresses',
                                 'email addresses',
                                 'credit card information'],
            'identity_theft_risk': 'Potential (due to PII exposure)',
            'payment_information_risk': 'Potential (credit card information '
                                        'exposed)'},
 'references': [{'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulations_violated': ['Potential violation of '
                                                    'California data breach '
                                                    'notification laws (e.g., '
                                                    'California Civil Code § '
                                                    '1798.82)'],
                           'regulatory_notifications': 'Reported to California '
                                                       'Office of the Attorney '
                                                       'General'},
 'response': {'communication_strategy': 'Public disclosure via California '
                                        'Office of the Attorney General'},
 'title': 'Hydro Flask Data Breach (2017)',
 'type': 'Data Breach'}