Aptos, Inc. on behalf of Retailers in Attached Addenda

State of California Attorney General breach notification filed by Aptos, Inc. on behalf of retailers. The filing is a sample notification; the attached PDF contains no extractable breach details in the provided source.

Tempur-Pedic experienced a data breach involving its former web hosting vendor. An unauthorized individual gained access to the website servers and installed malware to capture payment card information from transactions made between January and September 2016. Affected data included names, addresses, emails, phone numbers, and payment card details. The vendor engaged forensic investigators, removed the malware, and reported the incident to federal law enforcement. One year of complimentary identity protection services was offered to affected individuals.

Aptos, Inc., a software platform provider, disclosed a breach affecting over 40 retailers using its eCommerce platform. Unauthorized actors accessed systems between February and December 2016, obtaining names, addresses, phone numbers, and payment card data. The incident was reported to the FBI and DOJ. Remediation included malware removal, security updates, and offering 12 months of credit monitoring to affected customers.