SCUF Gaming International, LLC

SCUF Gaming International, LLC reported a data breach in Washington state affecting 691 individuals. Unauthorized access occurred between February 3, 2021, and March 16, 2021, when a third-party vendor's login credentials were used to inject a malicious script into the SCUF webstore backend. The script potentially exposed credit card numbers, CVVs, names, emails, and billing addresses. The script was detected and removed on March 16, 2021. SCUF engaged third-party forensic specialists for investigation.

SCUF Gaming International, LLC disclosed that login credentials for a third-party vendor were used to insert an unauthorized script onto its webstore backend between February 3 and March 16, 2021. The script was detected and removed on March 16, 2021. Investigation determined the script could capture credit card information (cardholder name, email, billing address, card number, expiration, CVV) from transactions processed via credit card. PayPal transactions were not compromised. The company engaged forensic specialists and enhanced security protocols.

SCUF Gaming International, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2021-10-21. 32,645 individuals were affected.

SCUF Gaming International, LLC reported an external system breach (hacking) occurring on 02/23/2021 and discovered on 03/16/2021. The incident compromised names and financial account numbers (including credit/debit card numbers with security codes/PINs) for 32,645 individuals, including 119 Maine residents. Written notification was sent on 10/21/2021. No identity theft protection services were offered.

SCUF Gaming International, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-10-21. 691 Massachusetts residents were affected. The report records the breach type as electronic.

SCUF Gaming International, LLC notified affected individuals of a security incident where unauthorized scripts were inserted into its webstore using stolen third-party vendor credentials. The incident occurred between February 3 and March 16, 2021, potentially exposing credit card numbers, CVVs, and personal information. The script was detected and removed on March 16, 2021. Forensic specialists were engaged.

SCUF Gaming International, LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2021-02-23 and was reported on 2021-05-04. 699 Indiana residents were affected. 36,645 individuals affected in total.

SCUF GAMING INTERNATION, LLC filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-425). The register records the breach as discovered on February 18, 2021. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.