SPECTRUM BRANDS, INC.

Spectrum Brands, Inc. reported an external system breach (hacking) occurring on May 30, 2023, discovered on August 11, 2023. The incident affected 3,225 individuals, including 1 Maine resident. Personal information acquired included names and Social Security Numbers. Spectrum Brands provided written notification on November 13, 2023, and offered 24 months of credit monitoring and identity protection services through Experian.

Affected (this filing): 3,225

Spectrum Brands, Inc. notified consumers of a data breach involving its employee wellness platform, CaféWell, operated by third-party vendor Welltok, Inc. An unknown actor exploited a vulnerability in MOVEit file transfer software between May 30-31, 2023. Impacted data included names, addresses, phone numbers, and email addresses. Welltok applied patches, engaged forensic specialists, notified law enforcement, and offered 24 months of credit monitoring via Experian.