Lowe's Companies, Inc.

Lowe's Companies, Inc. notified California AG that a third-party vendor's unsecured backup server containing personal information of current and former drivers and employees was accessible from the internet. Data exposure occurred between July 2013 and April 2014. Affected data included names, addresses, DOBs, SSNs, and driver's license numbers. Lowe's blocked access, engaged forensic experts, and provided one year of credit monitoring.

Lowe's Companies, Inc. filed a New Hampshire Attorney General breach notification on May 19, 2014. The company reported unauthorized access to a customer database containing names, addresses, phone numbers, and partial credit card information. The company engaged forensic investigators and offered credit monitoring to affected individuals.