Arbonne International discloses security incident affecting users in California
California-based Arbonne International reported a data breach in its network. The unauthorized party had accessed personal user details, such as name, email and mailing addresses, phone numbers, order purchase histories, and Arbonne account passwords. The attack was discovered on April 20, 2020, and directly affected 3,527 California residents.
The Incident
As soon as the attack was detected, Arbonne hired third-party cybersecurity experts to launch an investigation, and to identify the extent of the breach. The investigation concluded on April 24, and affected users were notified by May 22. In the interim, Arbonne initiated a forced password reset for affected accounts. Impacted customers were offered 12 months of free credit monitoring and protection against identity theft. Arbonne reported the incident to the FBI.
Arm yourself against cybersecurity disasters like this by investing in an all-encompassing tool that will protect your network from brute-force attacks, ransomware threats, and denial-of-service (DoS) attacks. Download ManageEngine Log360, a comprehensive solution to help you combat both internal and external security attacks.
How ManageEngine can help.
Log360, our comprehensive SIEM solution, can help your organization by:
- Alerting security teams in real time about events that require their immediate attention, such as network attacks, unauthorized access attempts to files or folders, security group membership changes, and account lockouts.
- Detecting unauthorized network access attempts with its built-in Structured Threat Information eXpression (STIX/TAXII) feeds processor. Log360 also has a global IP threat database that can instantly detect known malicious traffic passing through the network as well as outbound connections to malicious domains and callback servers.
- Finding potential insider threats with its user and entity behavior analytics engine, which creates a baseline of normal activities that are specific to each user and notifies security personnel instantly when there's a deviation from this norm.
- Obtaining important forensic information about incidents. The collected logs can be securely archived to help prove adherence to compliance standards and reduce potential legal penalties during investigations.
- Automatically raising incidents as tickets to specific technicians in ServiceDesk Plus, JIRA, Zendesk, Kayako, or ServiceNow to create an incident resolution process that's swift and accountable.
Download a free trial of Log360 to see the tool in action for yourself.
Latest Ransomware attacks
Latest Data breach attacks
Latest Email Phishing attacks
Latest DoS and DDoS attacks
Latest Brute force attack
Latest Advanced persistent threat (APT)
