PAX Labs, Inc. data breach (2016)

⛰️New Hampshire State AGlinked via multistate filing link · 100%

Filed Aug 11, 2016bd_8bd1ff1a24c029ad

PAX Labs, Inc. notified the New Hampshire Attorney General of a security incident where an unauthorized party gained access to a cloud-based website server between June 25 and July 22, 2016. The attacker installed unauthorized software to access payment card data (names, card numbers, CVV) of approximately 24 New Hampshire residents. PAX engaged forensic investigators, notified processors and law enforcement, and implemented enhanced firewall and monitoring rules. Affected residents were offered 12 months of credit monitoring and identity theft insurance.

🐻California State AGlinked via multistate filing link · 100%

Filed Aug 12, 2016bd_ae35c365847dec6d

PAX Labs, Inc. disclosed a data breach affecting approximately 6,000 customers of its PAXvapor.com and JUULvapor.com e-commerce sites. Between June 25 and July 22, 2016, unauthorized parties accessed a cloud-based server and installed unauthorized software, exposing payment card data including names, billing/shipping addresses, card numbers, expiration dates, and CVV codes. PAX engaged forensic investigators, removed the malware, enhanced firewall rules, and provided 12 months of free identity protection via AllClear ID.

Affected (this filing): 6,000

🦬Montana State AG

Filed Aug 12, 2016bd_cdfab40ab9f0cea1

PAX Labs reported a data breach to the Montana Attorney General. The breach was reported on 2016-08-12. The breach occurred from 6/25/2016 to 7/22/2016. 10 Montana residents were affected.

Affected (this filing): 10

PAX Labs, Inc.

Litigation Timing

Affected residents by state

Timeline