dōTERRA International, LLC notified California residents that a third-party vendor providing data hosting and software services experienced an intrusion in March 2016. The incident resulted in the unauthorized acquisition of personal information for some Wellness Advocates and customers, potentially including names, Social Security numbers, payment card information, dates of birth, addresses, phone numbers, and credentials. dōTERRA engaged security firms and law enforcement, and offered 24 months of identity protection and credit monitoring.