In a shocking turn of events, the Los Angeles-based cannabis retailer Stiiizy has recently had to confront the aftermath of a cyberattack that jeopardized the security and privacy of thousands of customers. The company has taken swift action by filing a comprehensive report with the California Attorney General, shedding light on the details of the breach and the potential implications for those affected.
Key points from the report include:
- A cyber-incident in November 2024, suspected to be a ransomware attack orchestrated by a malicious group known as Everest.
- The compromised data includes a plethora of sensitive information such as names, addresses, birth dates, driver’s license and passport numbers, photos, signatures, medical cannabis cards, and transaction history.
- The breach affected four Stiiizy locations, with two in San Francisco, one in Alameda, and one in Modesto.
- Everest claims responsibility for the attack and alleges that over 420,000 customers have been impacted.
The fallout from this breach is significant, as it exposes customers to risks of identity theft, personalized phishing attacks, and other forms of cybercrime. The breach notification letter issued by Stiiizy to affected customers underscores the severity of the situation and the urgent need for vigilance in safeguarding personal information.
As of May 2024, Stiiizy’s presence spanned across California and Michigan, with a total of 34 retail stores operating in California and three in Michigan. With products available in multiple states, including Washington, Nevada, Illinois, and Arizona, the company’s reach extends far beyond its origin in Los Angeles.
In the wake of this cyber incident, it is crucial for customers to stay informed, remain vigilant, and take proactive steps to protect their data and privacy. Stiiizy’s proactive approach in addressing the breach serves as a reminder of the ever-present threats in the digital landscape and the importance of robust cybersecurity measures in safeguarding sensitive information.
In conclusion, the cyberattack on Stiiizy serves as a stark reminder of the vulnerabilities inherent in the digital ecosystem and the need for businesses and individuals alike to prioritize cybersecurity. By remaining informed, vigilant, and proactive, we can collectively work towards creating a safer online environment for all stakeholders.
Leave feedback about this