Aptos, Inc. on behalf of Retailers in Attached Addenda

State of California Attorney General breach notification filed by Aptos, Inc. on behalf of retailers. The filing is a sample notification; the attached PDF contains no extractable breach details in the provided source.

Tempur-Pedic disclosed a data breach affecting customers who made payment card purchases on Tempurpedic.com between 2016 and September 30, 2016. An unauthorized individual accessed the website servers via a third-party hosting vendor and installed malicious software to capture payment card information. Affected data includes names, addresses, email addresses, phone numbers, payment card account numbers, and expiration dates. Social Security numbers were not involved. The incident was contained, malware removed, and the company transitioned to a new hosting vendor. One year of identity protection services was offered to affected individuals.

Aptos, Inc., a software platform provider for eCommerce, disclosed that an unauthorized person remotely accessed its systems between February 2016 and December 2016. The intrusion affected consumers of over 40 retailers, including Bambeco. Exposed data included names, addresses, phone numbers, payment card numbers, and expiration dates. Aptos discovered the intrusion in late November 2016 and reported it to the FBI and DOJ. Malware was removed, and access controls were strengthened. Affected customers were offered 12 months of identity protection.