Los Angeles-based cannabis brand Stiiizy recently made headlines after confirming a major data breach that exposed sensitive customer information. Hackers managed to access a significant amount of data, including government-issued documents and medical cannabis cards, during a cyberattack in November.
The breach, which affected some of Stiiizy’s retail locations, was reportedly carried out by an organized cybercrime group. Customer data processed between October 10 and November 10, 2024, was compromised, leading to the theft of customer names, addresses, dates of birth, transaction data, and other personal information.
Stiiizy, with 39 stores across the United States, has yet to disclose the exact number of affected customers. However, it has been confirmed that the incident impacted four retail locations in California. The nature of the attack has not been officially described by Stiiizy, but cybersecurity experts suggest that it may have been a ransomware attack.
According to reports from a Texas-based cybersecurity startup, the Everest ransomware group took credit for the cyberattack on Stiiizy. The group claimed to have stolen personal information, including identification documents, from over 420,000 customers. Despite ransom demands, the data was eventually leaked on the dark web after Stiiizy reportedly refused to meet the hackers’ demands.
