AeroGrow International Inc

AeroGrow International, Inc. notified California AG that malware infiltrated its online servers between Oct 2014 and Apr 2015. The incident potentially exposed customer names, addresses, and credit card details (account number, expiration, CVV). AeroGrow does not store card data; it was captured in transit. The company hired forensic specialists, eradicated the malware, alerted law enforcement, and offered free identity protection via Experian.

AeroGrow International, Inc. reported a cybersecurity incident involving malicious software (malware) infiltrating its online servers hosted by a third-party provider. The breach affected customer data, including names, addresses, and payment card details (account number, expiration, CVV), collected between May 13, 2015, and June 10, 2015. The company eradicated the malware, alerted law enforcement, and offered free identity protection services via Experian. This filing serves as a supplemental notification to a prior notice.