The National Wildlife Federation

National Wildlife Federation, a non-profit/charity sector entity reported a malware incident to the Washington Attorney General. The organization became aware of the incident on 2020-12-04 and filed notice on 2021-03-24. 3,311 Washington residents were affected. 110 days elapsed between awareness and notification. 667 days to identify the breach. 6 days to contain the breach.

The National Wildlife Federation disclosed a data security incident involving its Zoobooks.com payment card processing. Malicious code captured customer payment information (names, addresses, card numbers, CVVs) between Feb 6, 2019, and Dec 10, 2020. NWF retained forensic specialists, remediated the issue, and notified affected individuals, including 319 Rhode Island residents.

The National Wildlife Federation, a non-profit organization, reported an external system breach (hacking) that occurred from February 6, 2019, to December 10, 2020. The incident was discovered on January 8, 2021. The breach impacted 818 Maine residents, compromising their names in combination with financial account numbers or credit/debit card numbers and their associated security codes or PINs. Written notifications were sent to affected individuals on March 24, 2021.

The National Wildlife Federation reported a data breach to the Oregon Attorney General. The breach was reported on 2021-03-24. 95,251 individuals were affected.

The National Wildlife Federation notified South Carolina (and other states) that malicious code on Zoobooks.com compromised payment card data (name, address, card number, CVV) for customers between Feb 2019 and Dec 2020. Forensic specialists were retained. 319 Rhode Island residents were impacted; total count undisclosed.

National Wildlife Federation, a non-profit/charity sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2019-04-25 and filed notice on 2019-05-24. 1,564 Washington residents were affected. 29 days elapsed between awareness and notification. 112 days to identify the breach. 0 days to contain the breach.

The National Wildlife Federation (NWF) notified affected individuals of unauthorized access to a back-end database hosted by a third-party vendor for their Ranger Rick Zoobooks e-commerce website. The database was accessed without authorization on or around January 3, 2019, and discovered by NWF on approximately April 25, 2019. Potentially affected data includes names, addresses, credit/debit card numbers, expiration dates, and CVV codes.

National Wildlife Federation reported a data breach to the Montana Attorney General. The breach was reported on 2019-05-24. The breach occurred from 1/3/2019 to 4/25/2019. 208 Montana residents were affected.

National Wildlife Federation reported a data breach to the Oregon Attorney General. The breach was reported on 2019-05-24. The breach occurred during 1/3/2019. The breach was discovered on 4/25/2019. 47,343 individuals were affected. Notice was sent on 5/24/2019.