The National Wildlife Federation

National Wildlife Federation notified NH AG of a data event affecting 838 NH residents. Malicious code on Zoobooks.com (Feb 2019-Dec 2020) captured payment card info. Vendor notified NWF on Dec 4, 2020. NWF engaged forensic specialists and remediated the site. Notices sent March 24, 2021.

National Wildlife Federation notified Montana DOJ of a data security incident affecting Zoobooks.com customers. Malicious code captured payment card info, names, and addresses between Feb 2019 and Dec 2020. Incident discovered Dec 2020 via third-party vendor notice. Forensic investigation confirmed unauthorized acquisition. No specific count of affected individuals provided in this filing.

National Wildlife Federation notified Washington AG of a data event affecting 3,311 residents. Malicious code on Zoobooks.com (third-party vendor) captured payment card info (CVV, number) between Feb 2019 and Dec 2020. Discovered Dec 2020; notified March 2021. Remediation included vendor security measures and forensic investigation.

The National Wildlife Federation (NWF) notified customers that malicious code on Zoobooks.com may have compromised payment card information (card number, expiration date, CVV) and identity data (name, address) between February 6, 2019, and December 10, 2020. NWF discovered the incident on December 4, 2020, after receiving notice from its third-party IT security vendor. NWF retained forensic specialists, remediated the issue with vendors, and secured the website. No specific count of affected individuals was disclosed in the notice.

The National Wildlife Federation, a non-profit organization, reported an external system breach (hacking) that occurred from February 6, 2019, to December 10, 2020. The incident was discovered on January 8, 2021. The breach impacted 818 Maine residents, compromising their names in combination with financial account numbers or credit/debit card numbers and their associated security codes or PINs. Written notifications were sent to affected individuals on March 24, 2021.

National Wildlife Federation reported a data breach to the Indiana Attorney General. The breach occurred on 2019-02-06 and was reported on 2021-03-24. 2,004 Indiana residents were affected. 95,251 individuals affected in total.

The National Wildlife Federation reported a data breach to the Oregon Attorney General. The breach was reported on 2021-03-24. 95,251 individuals were affected.

The National Wildlife Federation notified South Carolina (and other states) that malicious code on Zoobooks.com compromised payment card data (name, address, card number, CVV) for customers between Feb 2019 and Dec 2020. Forensic specialists were retained. 319 Rhode Island residents were impacted; total count undisclosed.

The National Wildlife Federation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2021-03-24. 2,882 Massachusetts residents were affected. The report records the breach type as electronic.

NATIONAL WILDLIFE FEDERATION filed a data-breach notice with the Illinois Attorney General during 2021 (case 21-147). The register records the breach as discovered on December 4, 2020. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

National Wildlife Federation notified Washington AG of unauthorized access to a third-party vendor's database containing Ranger Rick Zoobooks customer data. Access occurred Jan 3, 2019; discovered April 25, 2019. Affected data included names, addresses, credit/debit card numbers, expiration dates, and CVVs. 1,564 Washington residents notified on May 24, 2019. Investigation ongoing.

National Wildlife Federation notified customers that a third-party vendor's database containing Ranger Rick Zoobooks payment data was accessed without authorization on Jan 3, 2019. The breach was discovered on Apr 25, 2019. Affected data includes names, addresses, credit/debit card numbers, expiration dates, and CVVs. The organization engaged investigators, secured the website, and is working with the vendor on additional safeguards.

National Wildlife Federation notified Montana residents of a data event involving unauthorized access to a third-party hosted database containing Ranger Rick Zoobooks customer information. Access occurred around Jan 3, 2019; discovered April 25, 2019. Potentially affected data includes names, addresses, credit/debit card numbers, expiration dates, and CVVs. No specific count of affected individuals was disclosed in this filing.

National Wildlife Federation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-05-24. 1,233 Massachusetts residents were affected. The report records the breach type as electronic.

National Wildlife Federation reported a data breach to the Oregon Attorney General. The breach was reported on 2019-05-24. The breach occurred during 1/3/2019. The breach was discovered on 4/25/2019. 47,343 individuals were affected. Notice was sent on 5/24/2019.

National Wildlife Federation notified NH AG of unauthorized access to a third-party vendor's database containing Ranger Rick Zoobooks customer payment card data. Access occurred around Jan 3, 2019; discovered April 25, 2019. 329 NH residents affected. Data included names, addresses, card numbers, and CVVs. Investigation ongoing.