Zymo Research Corporation
ent_02dd9dc8c63e09569085a61d
Disclosures
4
State AG · 4 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
768
as filed · State AG MA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Zymo Research Corporation
- Normalized
- zymo research— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (4)newest first
- Montana State AGas victim2017-08-28
Zymo Research Corporation notified Montana residents of a network data breach. Unauthorized access occurred on or about March 15, 2017, when an actor placed code on the company's external cloud e-commerce network to access a customer database. The incident was discovered on August 2, 2017. Compromised data included names, addresses, emails, hashed passwords, and credit card details. Zymo engaged forensic investigators and provided one year of identity monitoring via Kroll.
- California State AGas victim2017-08-25
Zymo Research Corporation discovered on August 2, 2017, that its external cloud e-commerce network was accessed by an unknown actor on March 15, 2017. The attacker placed code on the system to access a customer database containing names, addresses, emails, hashed passwords, and credit card information (numbers, CVVs, expiration dates). Zymo retained a third-party forensic firm, implemented additional security measures, and offered one year of identity monitoring via Kroll. The incident affected customers in California and Wyoming.
- Massachusetts State AGas victim2017-08-23
Zymo Research Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-08-23. 768 Massachusetts residents were affected. The report records the breach type as electronic.
- New Hampshire State AGas victim2017-08-21
Zymo Research Corporation notified the New Hampshire AG of a data breach affecting 121 residents. Unauthorized access occurred around March 15, 2017, via code placed on the external cloud e-commerce network. Discovered August 2, 2017. Data exposed: names, addresses, emails, hashed passwords, and credit card details. Forensic investigation retained; credit monitoring offered.