Advanced International Marketing Inc., a Monroe, Ohio-based firearms dealer, notified California's Attorney General that the company experienced a data breach that compromised its customers' name and state identification information.
The breach notification letter filed with the AG office stated that the company received a report on April 4th that an unauthorized person gained “access to certain images that had been uploaded to our website.” The images were accessed through exploiting a vulnerability discovered in the company website's document upload feature.
The firearms dealer said it “engaged a leading security firm and alerted law enforcement.” The company said images were removed from the web server and its security firm “enhanced the security of the upload feature” and reviewed the company website for other security flaws. Advanced International Marketing is offering customers a year of Experian identity theft protection services.
Calls placed to the company were not returned by press time.