Who: AeroGrow

# of Accounts Breached: Undetermined

What was affected: Credit card number, expiration date, and card verification value — also known as a security code

When it happened: Between October 29, 2018,​ and March 4, 2019

How it happened: On March 4, 2019, AeroGrow learned that an unauthorized person may have acquired, through the use of malicious code, the payment card information that users entered into the eCommerce vendor’s payment page.

Outcome: Upon learning of the incident, they immediately removed the code and secured the website. The company has also secured the help of a third-party cybersecurity firm to audit the AeroGrow website’s security.