MalwareCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSLowResolved
Nutritional Medicinals, LLC
bd_e9753bf5970b700c · schema v1 · pii pii-v1
Full breach record for Nutritional Medicinals, LLC →Nutranext, LLC disclosed a malware attack on May 27, 2020, where unauthorized software was installed on its websites (Rainbow Light, Natural Vitality, Neocell) to capture personal information. Affected data included names, emails, addresses, phone numbers, credit card numbers, expiration dates, and CVV codes. The company shut down websites, engaged cybersecurity experts, and offered one year of Experian IdentityWorks credit monitoring. The incident is resolved.
California clockDiscovered May 27, 2020 → Notified Sep 2, 202098d ✗ CA 60-day late14 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-193700
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 2, 2020
- Raw hash
- cdc8a1f7f0ee802fb2893f68987aae47693cc4aafc992717df8b554120ebf430
Reporting entity
- Name
- Nutritional Medicinals, LLCnorm: nutritional medicinals
- Domain
- nutranext.net
Victim entity
- Name
- Nutritional Medicinals, LLCnorm: nutritional medicinals
- Domain
- nutranext.net
Incident
- Discovered
- May 27, 2020
- Materiality determined
- —
- Notification sent
- Sep 2, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Unknown
- MITRE ATT&CK
- T1056 Input Capture
- Threat actor
- External
Compliance
- Time to disclose
- 14 weeks(98 days from discovery to filing)
- Compliance flags
- CA 60-day late · 98d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 27, 2020→ Notified: Sep 2, 202098d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.