NOTICE: If you made an online purchase from Thrive Causemetics between August 15 and September 15, 2020 and have received a NOTICE OF DATA BREACH, contact the Arnold Law Firm at (916) 777-7777.
On September 30, 2020, Thrive Causemetics notified shoppers of a month-long security breach involving Shopify, the e-commerce vendor for their website.
Shopify reports that two “rogue” support team employees illegitimately accessed and stole customer transactional records of certain merchants, including Thrive Causemetics and Kylie Cosmetics. The unauthorized access reportedly spans from August 15 and September 15, 2020. Shopify claims to have terminated these individuals’ access to their network and has reported the incident to law enforcement.
Shopify claims to be notifying affected merchants “as relevant,” but has not yet disclosed a list of those companies. So far, nearly 200 companies have reportedly been notified of their exposure to the data breach.
Compromised customer information may include:
Shopify currently claims that only the last four digits of credit cards were stolen in the security incident. However, online discussions reveal multiple shoppers who received Shopify data breach notices and claim to have suffered fraudulent credit card charges that correspond with the data breach time window.
Unfortunately, this is not Shopify’s first breach of customer payment information. On May 20, 2020, popular startup Bombas learned that malicious code in their Shopify e-commerce platform may have scraped personal information as customers purchased product online. The sock retailer reports that consumer data was exposed during a window from November 11, 2016 to February 16, 2017.
Shopify was originally founded in 2004 as Snowdevil, an online store for snowboarding equipment, which led to the development and launch of the Shopify platform two years later. The Canadian company now employs over 5,000 and claims to be an all-in-one commerce vendor, providing tools for payments, marketing, shipping and customer engagement for over one million businesses worldwide. Shopify’s estimated annual revenues are over 1.5 billion USD.
Founded in 2015, Thrive Causemetics is a luxury cosmetics start-up company positioned as vegan, cruelty-free and philanthropic. However, the Los Angeles-based beauty company has been under scrutiny about the validity of its charitable donation claims, including a class action suit filed in 2018. With projected 2020 revenues of $150 million, Thrive Causemetics is actively exploring sale or public listing options.
If you made an online purchase from Thrive Causemetics between August 15 and September 15, 2020 and have received a NOTICE OF DATA BREACH, contact the data breach lawyers at The Arnold Law Firm at (916) 777-7777 to discuss your situation and possible legal options.
Wrongfully blamed: What really happened to Randy Stevens
Randy Stevens opened his eyes and saw his wife standing over him in a hospital room. He had no idea what had happened. His last memory was of standing next to his truck trailer and watching as a Security Contractor Services forklift driver struggled to load an ungainly pallet of...Learn More
Last winter, a commercial truck and trailer made an abrupt wide turn into the path of a 24-year-old motorcyclist. The resulting collision sent Justin to the hospital with a collapsed lung, multiple fractured bones and a traumatic brain injury.
Justin's mother realized that her son needed legal help. While he was still in a coma...Learn More