DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

dōTERRA letter informs customers of possible data breach

Posted on April 26, 2016 by Dissent

McKenzie Romero reports:

A letter sent to customers and distributors from doTERRA, the Utah-based essential oil company, is warning that an apparent data breach last month may have compromised their personal information.

A letter dated April 18 explains that a breach of doTERRA’s third-party data hosting and software service provider may have accessed the names, Social Security or identification numbers, payment card information, dates of birth, postal and email addresses, telephone numbers, usernames and passwords.

Read more on Deseret News.

Copies of the notification letter appeared on the California and New Hampshire attorney general web sites.  While total number of individuals impacted was not disclosed by dōTERRA, they did report that 2,330 New Hampshire residents were among those impacted.


Related:

  • Another plastic surgery practice fell prey to a cyberattack that acquired patient photos and info
  • NY: Gloversville hit by ransomware attack, paid ransom
  • ModMed revealed they were victims of a cyberattack in July. Then some data showed up for sale.
  • Toys “R” Us Canada customers notified of breach of personal information
  • Gatineau gymnastics centre warns members of possible data breach
  • Data breach in 42 Latvian municipalities: DVI imposes 300,000 euro fine on ZZ Dats
Category: Business SectorSubcontractorU.S.

Post navigation

← NY: Tax refund fraud reported by Stony Point employees under investigation
Minecraft Server Exposes Details of 7 Million Gamers →

2 thoughts on “dōTERRA letter informs customers of possible data breach”

  1. Anonymous says:
    April 26, 2016 at 1:22 pm

    You see this?

    April 22, Akron Beacon Journal – (Ohio) Edwin Shaw employee loses flash drive, and some patient information with it. Akron General Edwin Shaw Rehabilitation hospital notified 975 patients April 22 that their personal, health, and insurance information may have been compromised after an employee from the Cuyahoga Falls rehab center lost a flash drive containing the data February 19. The hospital does not believe any information was misused and all employees at Cleveland Clinic Akron General were re-trained on protecting patient information.
    Source: http://www.ohio.com/news/local/edwin-shaw-employee-loses-flash-drive-and-some-patient-information-with-it-1.677983

    1. Dissent says:
      April 26, 2016 at 2:54 pm

      Thanks so much. I had missed that one but have now blogged about it: Edwin Shaw employee loses unencrypted flash drive with 975 patients’ info.

Comments are closed.

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • District of Massachusetts Allows Higher-Ed Student Data Breach Claims to Survive
  • End of the game for cybercrime infrastructure: 1025 servers taken down
  • Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded
  • St. Thomas Brushed Off Red Flags Before Dark-Web Data Dump Rocks Houston
  • A Wiltshire police breach posed possible safety concerns for violent crime victims as well as prison officers
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Almost two years later, Alpha Omega Winery notifies those affected by a data breach.
  • Court of Appeal reaffirms MFSA liability in data leak case, orders regulator to shoulder costs
  • A jailed hacking kingpin reveals all about the gang that left a trail of destruction
  • Army gynecologist took secret videos of patients during intimate exams, lawsuit says

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • Lawmakers Warn Governors About Sharing Drivers’ Data with Federal Government
  • As shoplifting surges, British retailers roll out ‘invasive’ facial recognition tools
  • Data broker Kochava agrees to change business practices to settle lawsuit
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Changes in the Rules for Disclosure for Substance Use Disorder Treatment Records: 42 CFR Part 2: What Changed, Why It Matters, and How It Aligns with HIPAAs

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.