On September 17, 2020, the California Office of the Attorney General disclosed a data breach affecting Greenworks Tools, stemming from a cyber-attack that persisted between July 14, 2019, and June 30, 2020. The incident compromised payment card information of approximately 1,425 Rhode Island residents, exposing sensitive details such as cardholder names, addresses, credit card numbers, expiration dates, and CVVs.The breach resulted from unauthorized access to the company’s systems, likely through a cyber intrusion targeting payment processing infrastructure. While the exact attack vector (e.g., malware, phishing, or exploitation of vulnerabilities) was not specified, the exposure of full payment card data—including CVVs—poses a high risk of fraudulent transactions and financial harm to affected individuals. The prolonged duration of the breach (nearly a year) suggests potential gaps in detection or mitigation controls.Although no evidence indicated broader systemic damage (e.g., operational disruption or ransomware), the compromise of financial data aligns with attacks that directly impact customer trust and financial security, warranting significant concern for both regulatory compliance (e.g., PCI DSS) and reputational damage. The company likely faced legal and remediation costs, including notifications, credit monitoring for victims, and potential fines under state data breach laws.