Between July 9, 2019, and October 9, 2019, Green Roads of Florida, LLC discovered that a data breach of certain customer and credit card information from orders placed on their greenroadsworld.com website was potentially compromised.
Upon learning of this incident, Green Roads immediately launched an investigation. It was determined that the root cause of the data breach was a compromised Administrator account in the webserver of our outsourced hosting provider.
The company stated that they have taken several important actions including restricted website administrative access, changed all passwords and installed continuous monitoring of all activity from Administrators.
Additionally, Green Roads has increased monitoring of all outbound data transfers. Green Roads feel confident that the data breach has been secured.
What Information Was Involved
Account information that was compromised in this incident included name, credit card number and expiration date
What actions Green Roads is Doing
We are taking additional steps to protect customer data from theft or similar criminal activity in the future. Under a new Chief Technology Officer, we have implemented additional safeguards to improve data security on our web server.
In addition, Green Roads has proactively engaged a third-party auditor to perform an updated PCI GAP analysis, remediation, network scans penetration testing and conduct a PCI audit. In addition, we are offering identity theft protection services through ID Experts®, the data breach and recovery services expert, to provide you with MyIDCare™.
MyIDCare services include: 12 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed id theft recovery services. With this protection, MyIDCare
CEO Laura Fuentes statement
will help you resolve issues if your identity is compromised.
What can you do?
The company encourages you to contact ID Experts with any questions and to enroll in free MyIDCare services by calling 1-833-953-1736 or going to https://ide.myidcare.com/greenroads and using the Enrollment Code provided in a letter sent to their customers.
What now?
With the recent news that Green Roads is the defendant in a CBD class-action lawsuit, one has to wonder if their CEO can turn their company around.