Adam JacksonCannabis retailer Stiiizy said Wednesday that customer data was compromised at four Northern California locations after cybercriminals breached one of its point-of-sale vendors.
The breach occurred between Oct. 10 and Nov. 10, 2024, exposing sensitive customer information including names, addresses, dates of birth and driver’s license numbers, according to the company’s Jan. 8 notice. Medical cannabis card information and transaction histories were also compromised.
The affected locations include two San Francisco dispensaries – one in Union Square and another in the Mission District – along with stores in Alameda and Modesto, according to the company.
Stiiizy learned of the breach on Nov. 20 when its vendor reported that accounts had been compromised by what it described as “an organized cybercrime group,” the notice said.
The company is offering impacted customers 12 months of free credit monitoring services through Cyberscout, a TransUnion company. Stiiizy has also set up a dedicated assistance line at 833-799-4284 for affected individuals, operating weekdays from 8 a.m. to 8 p.m. Eastern time.
“STIIIZY values your privacy and deeply regrets that this incident occurred,” the company said in its disclosure.
The company said it has worked in additional security measures “designed to prevent a recurrence of such an attack.”
The company advises affected customers to monitor their financial accounts for suspicious activity and consider placing fraud alerts on their credit files. Customers can also visit https://www.stiiizy.com/pages/notice-of-data-breach for more information about the incident.
