Helen Of Troy Ltd

OXO International, Ltd. disclosed that unauthorized code on its e-commerce website may have compromised customer personal information, including names, addresses, and credit card details. The incident affected orders placed between June 2017 and October 2018. OXO confirmed the breach on December 17, 2018, after forensic investigation. The company removed the malicious code, conducted penetration testing, and offered one year of identity monitoring through Kroll.

OXO International Ltd. notified Montana residents of a data breach involving unauthorized access to its e-commerce website. The incident, discovered Dec 17, 2018, compromised customer names, addresses, and credit card info entered between June 2017 and Oct 2018. OXO engaged forensic investigators, removed malicious code, and offered one year of Kroll identity monitoring.

OXO International Ltd. filed a supplemental notice with the New Hampshire Attorney General regarding a Magecart injection incident. The breach exposed customer names, billing/shipping addresses, and credit/debit card information. The filing reports 58 affected New Hampshire residents. OXO removed the malicious code, reissued credentials, and provided one year of credit monitoring.

Osprey Packs, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2013-08-28. 10 Massachusetts residents were affected. The report records the breach type as electronic.

Osprey Packs, Inc. notified the NH AG that a malware attack on its Pro Deal website allowed an unauthorized party to obtain admin credentials and access customer PII and credit card data. The attack began as early as July 9, 2013. Osprey detected the breach on August 7, 2013, after a customer reported fraudulent activity. Notifications were sent to affected NH residents on August 13, 2013.