Neutraceutical Wellness, Inc

ent_2664cce907943bb2717a58c9

Compliance scorecard →View in feed →

Disclosures

State AG · 4 jurisdictions

Multi-filing incidents

incidents joining 2+ filings here

Max affected reported

518

as filed · State AG WA

Leak-site claims

none in sample

◈ All 4 filings merge into one incident.View incident →

Identity resolution

Canonical name: Neutraceutical Wellness, Inc
Normalized: neutraceutical wellness— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (4)newest first

Washington State AGas victim2019-10-16
Neutraceutical Wellness, Inc. (dba Nutrafol) notified the Washington AG on Oct 16, 2019, of a cyberattack discovered Sept 11, 2019. 518 WA residents affected. Access to names, addresses, and credit card info. Company engaged forensic firm and notified card issuers. Notifications sent Oct 11, 2019.
New Hampshire State AGas victim2019-10-15
Nutraceutical Wellness Inc. (dba Nutrafol) notified the NH AG of a cyber incident discovered on Sept 11, 2019. Customer PII (names, addresses, credit card info) may have been accessed. 51 NH residents affected. Company engaged forensic firm and notified credit card issuers. Notifications to customers planned for Oct 10, 2019.
Montana State AGas victim2019-10-11
Nutraceutical Wellness Inc. (dba Nutrafol) disclosed a potential cybercrime incident discovered on September 11, 2019. Unauthorized third parties may have accessed names, addresses, and credit card information. The company retained a security firm for investigation and is enhancing security measures. No fraud was known at the time of notice.
Illinois State AGas victim2019-01-01
NUTRACEUTICAL WELLNESS, INC DBA. NUTRAFOL filed a data-breach notice with the Illinois Attorney General during 2019 (case 2019-420). The register records the breach as discovered on September 11, 2019. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.