Safe and Vault Store

SafeandVaultStore operates under the alias Safe and Vault Store. The company is headquartered in the United States of America. Its primary business is the online sale of physical safes to customers. To facilitate these sales, SafeandVaultStore maintains an eCommerce website. The website is built on the Magento platform.

On April 28, 2015, SafeandVaultStore suffered a cybersecurity breach. Attackers injected malicious code into the company’s Magento‑based eCommerce platform. The breach was made possible because the Magento installation was outdated and contained a known critical vulnerability. Exploitation of this vulnerability granted the attackers unauthorized access to stored customer order data. The compromised information included names, postal addresses, payment card numbers, card security codes, expiration dates, telephone numbers, and email addresses.

After discovering the intrusion, SafeandVaultStore promptly removed the malicious code from its site. The organization then applied the necessary security patches to upgrade the Magento software. A subsequent review of internal security policies was conducted to reduce the likelihood of similar incidents. To assist affected individuals, the company offered one year of complimentary identity protection services. These services were intended to monitor for any misuse of the personal data that had been exposed in the breach.