Stiiizy Cannabis Company Alerts Customers: Hackers Breach Security and Access ID Documents
In a significant security breach, the renowned Los Angeles-based cannabis brand Stiiizy has revealed that hackers infiltrated its systems, compromising sensitive customer information. This incident, which occurred during a cyberattack in November, has raised concerns over data security in the cannabis industry.
Details of the Cyberattack on Stiiizy
Stiiizy’s troubling announcement came via a data breach notice filed with California’s attorney general. The company disclosed that it was informed by its point-of-sale processing vendor about the breach, allegedly carried out by an “organized cybercrime group.”
What Data Was Compromised?
According to a letter sent to affected customers, the hackers accessed a range of sensitive information processed between October 10 and November 10, 2024. The stolen data includes:
- Driver’s licenses
- Passports
- Medical cannabis cards
- Customer names
- Addresses
- Dates of birth
- Transaction data
- Other personal information
Impact on Customers and Stiiizy’s Operations
While Stiiizy operates 39 locations across the United States, the company has yet to disclose the total number of customers affected by this breach. They confirmed that the incident impacted four of their retail locations in California, but did not respond to inquiries from TechCrunch.
Nature of the Incident
The specifics of the attack have not been fully detailed by Stiiizy. However, cybersecurity firm Halcyon AI indicated in a blog post that the company was potentially the target of a ransomware attack. The Everest ransomware group has claimed responsibility for the cyberattack, asserting that they stole personal information from over 420,000 customers.
Ransom Demands and Dark Web Activities
In a concerning twist, the Everest group announced on its dark web leak site that they had published the stolen data from Stiiizy after the company allegedly “ignored” their ransom demands. This incident underscores the urgent need for enhanced cybersecurity measures in the cannabis sector.
For more information on data security best practices, you can visit CISA for resources and guidelines.
As the story develops, customers are encouraged to monitor their personal information and remain vigilant against potential identity theft following this significant breach.
