Data Breach Notifications

Entity Information

  • Type of Organization: Other Commercial
  • Entity Name: Fioravanti Custom Products LLC dba Essential Wholesale & Labs
  • Street Address: 2211 NW Nicolai St.
  • City: Portland
  • State, or Country if outside the US: Oregon
  • Zip Code: 97210

Submitted By

  • Name: Pasha Sternberg
  • Title: Principal
  • Firm name (if different than entity): Polsinelli LLP
  • Telephone Number: 310-229-1335
  • Email Address: Psternberg@polsinelli.com
  • Relationship to entity whose information was compromised: Outside Privacy Counsel

Breach Information

  • Total number of persons affected (including residents): 2293
  • Total number of Maine residents affected: 7
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
  • Date(s) Breach Occured: April 27 – May 22, 2022; October 11 – November 5, 2022
  • Date Breach Discovered: October 3, 2022
  • Description of the Breach:
    • External system breach (hacking)
    • If other, please specify: Fioravanti recently identified that its website interface contained code that Fioravanti had not approved to be added to the website design. Upon discovering the incident, Fioravanti began an internal investigation, and it engaged a leading computer forensics firm to further examine its network and confirm the security of its systems. Through that investigation, Fioravanti determined that the code allowed a third party to view and potentially capture information that was entered on the checkout page as customer made purchases on the website. The information that would have been entered on the checkout page included customer names, shipping addresses, payment card information, and email addresses. Fioravanti determined that purchase made between April 27 – May 22, 2022, and October 11 – November 5, 2022, were subject to the code.
  • Information Acquired - Name or other personal identifier in combination with: Financial Account Number or Credit/Debit Card Number (in combination with security code, access code, password or PIN for the account)

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 02/21/2023
  • Copy of notice to affected Maine residents: EWL - Notification Proof.pdf
  • Date of any previous (within 12 months) breach notifications:
  • Were identity theft protection services offered: No
  • If yes, please provide the duration, the provider of the service and a brief description of the service: