SPECTRUM BRANDS, INC.

Welltok Inc., a vendor for Spectrum Brands, experienced a data breach via the MOVEit vulnerability (May 30-31, 2023). The incident affected personal information of 2 New Hampshire residents (employees). Welltok detected the breach on August 31, 2023, and notifications were sent on November 13, 2023. Response included patches, forensic investigation, law enforcement notification, and credit monitoring.

Spectrum Brands, Inc. notified consumers of a data breach involving its employee wellness platform, CaféWell, operated by third-party vendor Welltok, Inc. An unknown actor exploited a vulnerability in MOVEit file transfer software between May 30-31, 2023. Impacted data included names, addresses, phone numbers, and email addresses. Welltok applied patches, engaged forensic specialists, notified law enforcement, and offered 24 months of credit monitoring via Experian.

Spectrum Brands, Inc. reported an external system breach (hacking) occurring on May 30, 2023, discovered on August 11, 2023. The incident affected 3,225 individuals, including 1 Maine resident. Personal information acquired included names and Social Security Numbers. Spectrum Brands provided written notification on November 13, 2023, and offered 24 months of credit monitoring and identity protection services through Experian.

Spectrum Brands, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-11-10. 8 Massachusetts residents were affected. The report records the breach type as electronic.