STIIIZY data breach exposes cannabis buyers’ IDs and purchases

STIIIZY data breach exposes cannabis buyers’ IDs and purchases
Summary: STIIIZY, a popular cannabis brand, disclosed a data breach involving the theft of sensitive customer information through a compromised point-of-sale vendor. The breach affected numerous customers, exposing personal details such as government IDs and transaction histories.

Threat Actor: Everest Ransomware Gang | Everest
Victim: STIIIZY | STIIIZY

Key Point :

  • Data breach occurred after hackers compromised STIIIZY’s point-of-sale vendor.
  • Sensitive information stolen includes driver’s licenses, passport numbers, and transaction histories.
  • STIIIZY is offering free credit monitoring services to affected customers.
  • Everest ransomware gang claimed responsibility for the attack, affecting over 422,000 customers.
  • Customers are advised to monitor their credit history and be cautious of phishing attacks.

Source: https://www.bleepingcomputer.com/news/security/stiiizy-data-breach-exposes-cannabis-buyers-ids-and-purchases/