Stiiizy, Inc. has informed the public about an incident potentially affecting personal information processed by one of Stiiizy's vendors.
What happened?
On November 20, 2024, Stiizy was notified by a vendor of point-of-sale processing services for some of our retail locations that accounts with their organization had been compromised by an organized cybercrime group. An investigation conducted by the vendor revealed that personal information relating to certain Stiiizy customers processed by the vendor was acquired by the threat actors on or around October 10, 2024 - November 10, 2024. Upon receiving notice of the incident, Stiiizy launched its own investigation to assess the extent of the impact. Stiiizy has determined that some of its customer's personal information and documents were acquired by the threat actors. Stiiizy has been working closely with the vendor and its legal counsel to address the situation, including determining the cause of the incident. This notification was not delayed by law enforcement.
What information was involved?
Based on the initial investigation, the incident only impacted consumer profiles associated with the following Stiiizy locations: Stiiizy Union Square: 180 O'Farrell Street, San Francisco, CA, Stiiizy Mission: 3326 Mission Street, San Francisco, CA, Stiiizy Alameda: 1528 Webster St., Alameda, CA, Stiiizy Modesto: 426 McHenry Ave., Modesto, CA.
The incident impacted information contained on government-issued identification cards, including driver's licenses and medical cannabis cards, as well as information related to transactions with our dispensaries. The categories of information compromised include name, address, date of birth, age, driver's license number, passport number, photograph, the signatures appearing on a government ID card, medical cannabis cards, transaction histories, and other personal information. Not all of this information was affected by each impacted individual.
In a statement, Stiizy said that it "values your privacy and deeply regrets that this incident occurred. Stiiizy has implemented additional security measures designed to prevent a recurrence of such an attack and to protect the privacy of STIIIZY's valued customers."
The company is providing affected individuals with free credit monitoring services. Individuals who have received a notification or who believe they might be impacted by this incident may contact Stiiizy's dedicated assistance line at 833-799-4284 between the hours of 8:00 a.m. to 8:00 p.m. Eastern time, Monday through Friday, excluding holidays.
For more information:
Stiiizy
www.stiiizy.com