My Daily Choice reports data breach exposing 89k individuals
Learn More
On June 5, 2024, My Daily Choice, Inc. ("MDC") reported a data breach to the Attorney General of Maine after discovering that an unauthorized party had accessed sensitive information in the company's possession.
MDC provides a platform for consumers to discover and shop for products across multiple categories including health and wellness, CBD and hemp products, personal care, beauty, weight management, and travel savings.
On February 15, 2024, MDC detected suspicious activity within a third-party storage platform used to store certain data. MDC launched an investigation in collaboration with the vendor and third-party cybersecurity experts. The investigation confirmed that an unauthorized party had accessed and obtained files containing confidential consumer information on February 15, 2024.
The compromised data includes:
- Names
- Social Security numbers
- Payment card information
The nature of the attack and the compromised third party is not disclosed. It's also not clear whether the breach was caused by a misconfiguration and exposed storage or direct hacker attack. The attack has exposed approximately 89,000 individuals.
On June 5, 2024, MDC began sending data breach notification letters to all affected individuals, providing details about what specific information was compromised.
