🐻California State AGFirst filing
Filed Jun 6, 2024bd_cbd185e11c812795
Peak Design disclosed a data compromise involving historical customer service tickets from October 2013 to May 2023. On March 11, 2024, a security gap was inadvertently created when a private server hosting the information was accidentally made externally accessible due to a misconfiguration. The issue was detected by Cybernews on April 25, 2024, and promptly fixed. Peak Design believes the data was compromised on April 1, 2024, by an unauthorized third party. Affected data includes customer names, emails, shipping addresses, order details, and correspondence. No passwords, credit card info, bank info, or SSNs were compromised. Peak Design implemented an IT approval protocol and enhanced training to prevent recurrence.