International Vapor Group

International Vapor Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-03-18. 211 Massachusetts residents were affected. The report records the breach type as electronic.

International Vapor Group, Inc. notified the NH AG of a security incident where an unauthorized individual inserted malicious code into its e-commerce sites (vaporfi.com, directvapor.com) between Jan 19, 2018 and Jun 30, 2018. This occasionally captured payment card info. 48 NH residents were notified on March 12, 2019. IVG upgraded hardware, moved to AWS, and implemented new monitoring.

International Vapor Group (IVG) notified customers of a security incident affecting its e-commerce sites (directvapor.com, vaprofi.com) between January 19, 2018, and June 30, 2018. An unauthorized individual inserted malicious code into the websites, capturing credit/debit card information (name, address, card number, expiration date, CVV) for online purchases. Phone and retail store transactions were not affected. IVG engaged forensic investigators, upgraded hardware, modified software processes, implemented new monitoring, and migrated servers to AWS. No specific count of affected individuals was disclosed.

International Vapor Group notified affected individuals in March 2019 that unauthorized access to its e-commerce sites (directvapor.com, vaprofi.com) between Jan 19 and Jun 30, 2018 compromised customer PII and payment card data. Malicious code was inserted to capture card info. IVG engaged forensic investigators and enhanced security infrastructure.