P2021-ND-096

Western Safety Products (WSP) is a division of the Organization and is a Seattle, Washington based distributor of safety equipment to businesses. WSP had a web-based e-commerce site which was hosted by a third party. The website was closed in February 2018; however, unauthorized parties appear to have gained access and re-activated the site on September 19, 2018. It appears the administrative portal used by the third party hosting the site was compromised, and as a result, order information may have been exposed to an unauthorized third party. The breach was discovered on April 1, 2019 when a customer contacted the Organization with concerns about a compromised credit card (the concerns were not related but an investigation found the compromised site).