Plow and Hearth, LLC

Plow & Hearth reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-09-26. 302 Massachusetts residents were affected. The report records the breach type as electronic.

Plow & Hearth, LLC notified the NH Attorney General of a third-party data breach involving its e-commerce platform provider, Aptos, Inc. Unauthorized access occurred between July 22 and August 9, 2017, exposing consumer names, addresses, phone numbers, and payment card details (including CVVs). 116 NH residents were affected. Notices were sent in late September 2017. The FBI was notified, and the investigation was ongoing at the time of filing.

Plow and Hearth, LLC filed a supplemental notice with the Hawaii Office of Consumer Protection regarding a malware intrusion at third-party vendor Aptos, Inc. The intrusion, occurring between Feb-Dec 2016, exposed customer names, addresses, phone numbers, and payment card data. 1,834 Hawaii residents were notified between Feb 27 and Mar 14, 2017. Aptos engaged cybersecurity firms and law enforcement.

Plow & Hearth notified customers that its e-commerce platform provider, Aptos, Inc., experienced a malware intrusion between Feb and Dec 2016. The incident compromised customer PII and payment card data for transactions from 2013-2016. No evidence of misuse was found at the time of notification.

Plow and Hearth, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2017-03-10. The breach occurred during 2/1/2016 - 12/31/2016. The breach was discovered on 2/6/2017. Notice was sent on 2/27/20173/10/2017.

Plow and Hearth, LLC reported a cybersecurity incident to the Washington Attorney General. A third-party platform provider, Aptos, experienced a malware intrusion between February 2016 and December 2016. The incident affected 1,274 Washington residents, exposing names, addresses, phone numbers, and payment card data. Aptos engaged forensic investigators and notified law enforcement.