HackingRetail & ConsumerHealthcareRetailCapture App DataSkimmerData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSPCILowContained
Health Formula Inc.
bd_18247ea594cee6e7 · schema v1 · pii pii-v1
Full breach record for Health Formula Inc. →Health Formula Inc., a nutritional supplements retailer based in Dania Beach, FL, discovered on June 5, 2020 that payment card information was acquired without authorization from its website. The breach occurred around April 24, 2020. Compromised data included customer names, email addresses, billing addresses, and full payment card details (number, expiration date, security code). The company engaged a digital forensics firm, enhanced website security, and reported the incident to the FBI.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_3f3b593076bd80d9Maine State AGfiled 2020-11-06(4d gap)Verified by operator
- bd_07477f118c8162e7Montana State AGfiled 2020-10-29(4d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-195772
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 2, 2020
- Raw hash
- 4c6a5a7f346d39d537906efc9e3a11f4a076281a4409524f3f053cf3b33b3f95
Reporting entity
- Name
- Health Formula Inc.norm: health formula
Victim entity
- Name
- Health Formula Inc.norm: health formula
- Industry
- Retail & ConsumerllmHealthcarellm
Incident
- Discovered
- Jun 5, 2020
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSPCI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1056 Input CaptureT1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported incident to the Federal Bureau of Investigation
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 weeks(150 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.