Label-Printing Company Avery Discloses Cyber Incident Leading to Data Breach

Label company Avery Products Corporation recently disclosed a cybersecurity attack that led to the exposure of customers’ personal data and credit card information.

Avery’s website attacked in July

Avery, a US-based company that makes and sells self-adhesive labels, printing services, and branding elements, suffered a cyberattack last year.

Following the incident, the company sent data breach notifications to impacted parties, disclosing the date of the incident and measures taken to mitigate the damage.

An internal investigation revealed that threat actors injected a card skimmer on Avery’s website on July 18. Unfortunately, the company learned of the attack only in December, so data on the website was exposed for about five months.

Sensitive payment details stolen

In the vulnerable timeframe threat actors exfiltrated sensitive customer payment information from the compromised website, including:

• Full names
• Billing and shipping addresses
• Phone numbers
• Email addresses
• Purchase amounts
• Payment card numbers
• CVV codes
• Card expiration dates

Reportedly, threat actors stole the data of 61,193 customers. Although the exposed data is limited to payment information, the criminals could still use it for credit card fraud and other crimes.

Company response and mitigation steps

“As you are aware, Avery does not collect Social Security numbers, driver's license numbers or other government-issued ID numbers, dates of birth, or other sensitive personal information,” reads Avery’s data breach notification. “There is no indication that your online account credentials have been compromised. Impacted data may vary depending on the individual.”

In response to the incident, Avery offers 12 months of complimentary credit monitoring service, urging customers to remain vigilant and monitor their accounts for suspicious activity.

Unfortunately, data breaches still pose a significant threat, as they often occur without warning and strike indiscriminately.

Safeguarding your digital footprint

Specialized software like Bitdefender Digital Identity Protection can protect your digital identity by helping you understand the extent of your online data.

It encompasses a comprehensive overview of your digital persona, including traces from services you no longer use, constantly monitors the public and Dark web and instantly notifies you if your data has been exposed in a breach.

Additionally, it lets you patch weak points in your digital footprint by providing one-click, quick-action items.