WILTON BRANDS LLC

Wilton Brands LLC disclosed a security incident occurring between July 19, 2012, and October 2, 2012, where a malicious user accessed a server hosting wilton.com and copco.com. The incident exposed customer names, addresses, and payment card information (including CVV2/CVC2/CID). Wilton engaged forensic investigators, notified law enforcement, and changed its payment processing system to stop storing full card data. Affected individuals were offered one year of Experian ProtectMyID services.

Wilton Brands LLC notified California AG that a malicious user modified its shopping cart functionality between Oct 8, 2012 and Jan 8, 2013, intercepting customer PII and payment card data (including CVV). At least one fraudulent transaction occurred. Wilton notified law enforcement, replaced its webserver, shifted payment processing to a third party, and offered one year of Experian ProtectMyID monitoring.