REI Co-Op

REI Co-op notified the NH AG of a phishing incident where an unauthorized party accessed a vendor email account. The attacker obtained credentials via phishing on May 1, 2020, and accessed the account on May 12. Data potentially accessible included names and SSNs of 2 NH residents. REI disabled access, notified law enforcement, and engaged forensic reviewers.

REI Co-op notified Montana and other state residents of a cybersecurity incident discovered on May 13, 2020, where an unauthorized party may have accessed personal information including names, addresses, emails, and SSNs from supplier and contributor forms. REI secured systems, engaged law enforcement and a cybersecurity firm, and offered one year of identity monitoring.

REI Co-Op reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-09-16. 3 Massachusetts residents were affected. The report records the breach type as electronic.

REI Co-Op reported an external system breach that occurred on May 12, 2020, and was discovered the following day. The breach compromised the names and Social Security numbers of 363 individuals. Affected parties were notified in writing on September 16, 2020, and were offered credit and identity monitoring services through Kroll.