DOTERRA INTERNATIONAL, LLC

doTERRA International, LLC notified customers and Wellness Advocates that a third-party vendor's systems were accessed in March 2016, resulting in the unauthorized acquisition of personal information including names, SSNs, payment card data, and credentials. doTERRA engaged security experts and law enforcement, and offered 24 months of free credit monitoring.

doTERRA International, LLC notified Hawaii OCP of a third-party vendor breach in March 2016. Unauthorized access resulted in acquisition of personal information including SSNs, payment card data, and credentials for approximately 17,315 Hawaii residents. doTERRA engaged law enforcement and security experts, and offered 24 months of credit monitoring.

DOTERRA INTERNATIONAL LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2016-05-02. The breach occurred during 3/1/2016. Notice was sent on 4/18/2016.

dōTERRA International, LLC notified California residents that a third-party vendor providing data hosting and software services experienced an intrusion in March 2016. The incident resulted in the unauthorized acquisition of personal information for some Wellness Advocates and customers, potentially including names, Social Security numbers, payment card information, dates of birth, addresses, phone numbers, and credentials. dōTERRA engaged security firms and law enforcement, and offered 24 months of identity protection and credit monitoring.

dOTERRA International, LLC notified the NH Attorney General of a March 2016 breach involving a third-party hosting vendor. Unauthorized access resulted in the acquisition of personal information including SSNs, payment card data, and credentials for approximately 2,330 NH residents. dOTERRA engaged security experts and law enforcement, offering 24 months of credit monitoring.

doTERRA International LLC notified Washington AG that a third-party vendor's systems were accessed in March 2016, compromising personal info of ~41,485 Washington residents including names, SSNs, payment card data, and credentials. doTERRA engaged security experts, notified law enforcement, and offered 2 years of credit monitoring.

doTERRA International, LLC notified Montana residents that a third-party vendor's systems were accessed in March 2016, resulting in the unauthorized acquisition of personal information including names, SSNs, payment card data, and credentials. doTERRA engaged law enforcement and security experts, offering 24 months of credit monitoring.

doTERRA International, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-04-18. 4,442 Massachusetts residents were affected. The report records the breach type as electronic.