California-based cannabis brand Stiiizy is notifying 380,000 people that their personal information was affected by a data breach at one of its suppliers.
See also: Data breaches hit healthcare in 2024
According to Stiiizy, it discovered the incident in late November after the vendor notified it of a cyber breach ,with the attackers having access to compromised systems for about a month.
Between October 10 and November 10, the malicious actor stole personal information and documents, affecting consumer profiles associated with four Stiiizy locations in San Francisco, Alameda, and Modesto.
“The incident affected information contained on government-issued identification cards, including driver’s licenses and medical cannabis cards, as well as information related to transactions with our dispensaries,” the company said.
Potentially compromised information includes names, addresses, dates of birth, driver's license numbers, passport numbers, photos, age information, medical marijuana cards, signatures on government ID cards, transaction histories, and other details.
See also: Telefónica: Data breach affects thousands of employees and customers
Stiiizy has notified the Maine Attorney General's Office that it is sending written notices to 380,000 people who may have been affected by the data breach. The company is providing affected individuals with 12 months of free credit monitoring and fraud prevention assistance.
While Stiiizy did not share further details about the type of breach its vendor fell victim to, it appears that ransomware.
In late November, the Everest ransomware group added the cannabis retailer to its Tor-based leak site, claiming to have stolen 422,075 customer records. A month later, the group made some of the allegedly stolen information, threatening to leak tens of thousands of customer profiles unless a ransom was paid.
One of the largest cannabis retail chains in California and the top-selling cannabis brand in the U.S., Stiiizy operates 34 locations and employs more than 1,700 people. The company was founded in 2017.
See also: Medusind: Data breach affects 360,000 people
Data breaches are a serious issue in the digital age. They occur when unauthorized individuals gain access to sensitive information, whether it belongs to organizations or individuals. The consequences can include financial losses, loss of trust, and legal penalties. Protecting data through strong passwords, encryption, and regular security updates is critical to preventing such incidents.
Source: securityweek
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
