Nutritional Medicinals, LLC

Nature's Sunshine Products' wholly-owned Japanese subsidiary, Synergy Worldwide Japan G.K., was the victim of a Business Email Compromise (BEC) scheme. Criminal actors used employee impersonation to fraudulently induce wire transfers totaling $4.8 million between Feb 1-17, 2023. The company discovered the incident on Feb 17, 2023, engaged third-party investigators, and notified law enforcement. No unauthorized access to consumer data was found.

Nutritional Medicinals, LLC dba Functional Formularies reported a data breach to the Maine Attorney General, affecting one Maine resident. The breach, which occurred between January 18, 2021, and April 14, 2021, and was discovered on March 25, 2021, was described as an external system breach or hacking incident. The compromised information included names and financial account numbers or credit/debit card numbers with their access codes. The company notified the affected individual on June 14, 2021, and offered 24 months of credit monitoring services through Kroll.

Nutranext, LLC disclosed a malware attack on May 27, 2020, where unauthorized software was installed on its websites (Rainbow Light, Natural Vitality, Neocell) to capture personal information. Affected data included names, emails, addresses, phone numbers, credit card numbers, expiration dates, and CVV codes. The company shut down websites, engaged cybersecurity experts, and offered one year of Experian IdentityWorks credit monitoring. The incident is resolved.