cbdMD Data Breach

NOTICE: If you made an online purchase from cbdMD.com between March 30, 2020 through May 8, 2020 or between May 14, 2020 through May 18, 2020 and have received a NOTICE OF DATA BREACH from CBD Industries, contact the Arnold Law Firm at (916) 777-7777.

data-breach-lock-blue-numbersOn September 29, 2020, CBD Industries, LLC (cbdMD) disclosed a cybersecurity incident involving their cbdmd.com website. The retailer’s e-commerce platform was hacked with malicious code that allowed customer information to be skimmed by an unauthorized third party.

An unknown number of customers who placed online orders from March 30, 2020 through May 8, 2020 and May 14, 2020 through May 18, 2020 were affected.

The producer and distributor of cannabidiol (CBD) products reported that compromised personal information may include:

  • First and last names
  • Email addresses
  • Billing addresses
  • Credit or debit card numbers
  • Expiration dates
  • Card security codes
  • Bank account numbers

cbdMD notified law enforcement of the data breach, submitted an 8-K filing with the Securities and Exchange Commission, and claims to have implemented additional technical security measures designed to prevent similar incidents from occurring in the future.

The company is currently notifying affected customers and offering one year of identity monitoring services.

Headquartered in Charlotte, North Carolina, cbdMD manufactures hemp products that are considered THC-free (with undetectable THC content), including broad-spectrum CBD oils in a range of strengths for general wellness to chronic pain relief. Founded in 2015, cbdMD now has over 100 employees and estimated annual revenues of $20 million.

The 2018 Farm Bill made it legal to produce, sell, and consume hemp and hemp-derived products throughout all 50 states. These products must be derived from industrial hemp containing less than 0.3 percent THC. Tetrahydrocannabinol (THC) is a natural compound found in cannabis plants -- including hemp, but to a lesser degree compared with marijuana. THC is the main psychoactive compound in cannabis that produces a “high” sensation.

If you made an online purchase from cbdMD.com between March 30, 2020 through May 8, 2020 or between May 14, 2020 through May 18, 2020 and have received a NOTICE OF DATA BREACH from CBD Industries, contact the data breach lawyers at the Arnold Law Firm at (916) 777-7777 to discuss your situation and possible legal options.