Breach, Threat Management, Data Security, Malware

Online retailer to pay $100K over breach


Following a data breach that compromised 25,000 credit card numbers, the attorney general of New York reached a settlement with Provision Supply, d/b/a

The online retailer has agreed to pay $100,000 and to upgrade its data security practices, according to a release from Attorney General Eric T. Schneiderman.

The website of the Brooklyn, N.Y.-based e-retailer was attacked in August 2014 and its merchant bank alerted it in June 2015 that fraudulent charges were showing up on card accounts. quickly hired a forensic investigation firm, which succeeded in removing malware on its site.

However, the company failed to notify customers or law enforcement and was found to misrepresent the safety of its website, which it claimed was secure.

In addition to the fine, the company has agreed to investigate any future breaches, provide prompt notice to authorities and affected customers in New York, maintain reasonable security policies and train employees.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.