On March 13, 2024, the California Office of the Attorney General disclosed a data breach affecting Teleflora, a floral wire service company. The incident, which occurred on November 9, 2023, involved unauthorized access to files containing sensitive personal information, specifically names and Social Security Numbers (SSNs) of individuals. The exact number of affected individuals remains unknown, but the exposure of SSNs poses a significant risk of identity theft, financial fraud, and long-term reputational harm to those impacted.The breach highlights vulnerabilities in Teleflora’s data security measures, as threat actors successfully infiltrated systems housing highly confidential customer data. While the company has not provided details on the attack vector (e.g., phishing, exploitation of unpatched systems), the compromise of SSNs—critical identifiers for financial and governmental verification—elevates the severity of the incident. Affected individuals may face prolonged monitoring of credit reports, potential fraudulent account openings, and other malicious activities stemming from the exposed data.Teleflora’s response, including notification protocols and remediation efforts, was not specified in the report. However, the breach underscores the growing targeting of mid-sized enterprises by cybercriminals seeking valuable personal data for monetization or further attacks.

On February 27, 2015, The Wonderful Company LLC (previously Roll Global LLC) experienced a data breach when a password-protected laptop belonging to an employee of HUB International was stolen. The incident exposed a limited number of Social Security numbers and employees' claim-related data, affecting approximately 24 individuals. While the laptop was password-protected, the breach posed a risk of unauthorized access to sensitive employee information. In response, the company offered 24 months of complimentary credit monitoring services to the affected individuals. The breach was reported to the California Office of the Attorney General on June 1, 2015. The exposed data primarily involved internal employee records, with no indication of broader customer data compromise or financial fraud beyond potential identity theft risks for the impacted employees.