HackingRetail & ConsumerRetailStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDFinancial accountCredentialsHighContained

DOTERRA INTERNATIONAL, LLC

bd_9c78fc895e9a6687 · schema v1 · pii pii-v1

Severity

High

Discovered

—

Filed

May 11, 2016

To disclose

—

Affected

17,315state residents only

Linked

8 filings

Confidence

67%

Full breach record for DOTERRA INTERNATIONAL, LLC →

doTERRA International, LLC notified Hawaii OCP of a third-party vendor breach in March 2016. Unauthorized access resulted in acquisition of personal information including SSNs, payment card data, and credentials for approximately 17,315 Hawaii residents. doTERRA engaged law enforcement and security experts, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Hawaii clock✓ HI CRA notice due

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Mar 1, 2016

Begins

May 11, 2016

Filed

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

South Carolina State AGbd_05a513dc0989d7562016-05-12 · +1dVerified
Oregon State AGbd_fbb6cfe862b6c98e2016-05-02 · +9dVerified
California State AGbd_2143531664cf479b2016-04-18 · +23dVerified
New Hampshire State AGbd_6a3e063adb2d639d2016-04-18 · +23dVerified

Show 3 more filings ↓up to 23d gap

Washington State AGbd_9a87e92b0eb4f9a12016-04-18 · +23dCandidate
Montana State AGbd_b620c205f026aa442016-04-18 · +23dVerified
Massachusetts State AGbd_e8aee4e3ea940ead2016-04-18 · +23dVerified

Name: Hunton & Williams LLP
norm: hunton williams

Name: DOTERRA INTERNATIONAL, LLC
norm: doterra international
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Mar 1, 2016
Materiality determined: —
Notification sent: Apr 18, 2016
Affected individuals: 17,315state-resident count only
Data types: Identity (basic)Government IDFinancial accountCredentials
Data elements: Social Security numberDate of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Hawaii Office of Consumer Protection
Initial access: supply_chain

During the incident: Working closely with law enforcement authorities
Engaged leading security experts
Paid for and arranged to offer identity protection and credit monitoring services to affected individuals for two years
Engaged industry-leading security firms to assist us
Changes made: Investing heavily to implement its own state-of-the-art systems to support growth and expansion and enhance security
Reviewing and strengthening IT systems and protocols
Source: Quoted from the filing itself, not independently verified.

Compliance flags: HI CRA notice due
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

California State AGApr 18 · first

New Hampshire State AGApr 18 · first

Washington State AGApr 18 · first

Montana State AGApr 18 · first

Massachusetts State AGApr 18 · first

Oregon State AG+14d

Hawaii State AG+23d · this page

South Carolina State AG+24d

Pattern: first filing Apr 18 (CA), last May 12 (SC) — a 24-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://web.archive.org/web/20211024101019id_/https://cca.hawaii.gov/ocp/files/2016/05/OCP-2016-0247.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 11, 2016
Raw hash: 941ecf5752f731ffccb427c6aed56734626625f195598f9fcdd72adcae2c75b8

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityHunton & Williams LLP

Victim entityDOTERRA INTERNATIONAL, LLC

IncidentThird-Party / Supply Chain

Stated responseWorking closely with law enforcement authorities

ComplianceHI CRA notice due

Extraction provenanceno artifact recorded

Source provenanceweb.archive.org