Southbeachsmoke.com; vaporfi.com; directvapor.com

Three e-commerce websites, Southbeachsmoke.com, vaporfi.com, and directvapor.com, reported an unauthorized access incident that occurred on September 14, 2020. The breach was discovered on September 23, 2020. The compromised information includes customers' names in combination with their financial account or credit/debit card numbers and associated security codes or PINs. A total of 10,544 individuals were affected, including 3 residents of Maine, who were notified in writing on December 21, 2020.

Affected (this filing): 3

California AG SB24 breach notification for Southbeachsmoke.com, directvapor.com, and vaporfi.com. Unauthorized access to online checkout pages between Sept 14-23, 2020. Exposed names, addresses, and credit/debit card details (including CVV). Investigation completed Oct 13, 2020. Remediation included fixing vulnerabilities, system audits, and implementing MFA for remote access.