2023-05-26 Polished.com Inc. Cybersecurity Incident

Page last updated on April 11, 2024

Polished.com Inc. initially disclosed a cybersecurity incident in an SEC 8-K filing on 2023-05-26 16:15:43 EDT.

Incident Details

Material: Unknown
Is Breach: Unknown
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date: 2023-05-16
Detected Date:
Disclosure Date: 2023-05-26
Contained Date:
Recovered Date:

Attack Goal: Unknown

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2023-05-26

Polished.com Inc. filed an 8-K at 2023-05-26 16:15:43 EDT
Accession Number: 0001213900-23-043529

Item 8.01 Other Events.

On March 16, 2023, Polished.com Inc. (the “Company”) experienced a hacking attack that impacted the check-out page on the Company’s e-commerce website. In response, the Company deployed containment measures, launched an investigation with assistance from third-party cybersecurity experts and notified appropriate law enforcement authorities. The Company considers the matter remediated.

The investigation determined that certain personal information, including names, addresses, zip codes, payment card numbers, expiration dates, and CVVs, was extracted from the Company’s systems as part of this incident. The investigation could not determine with precision which payment card data was included in the timeframe of exposure. Out of an abundance of caution, the Company notified all payment card users who made transactions on the Company’s e-commerce website within the window of exposure. As of May 24, 2023, the Company provided appropriate notice to approximately 9,290 individuals, as well as to regulatory authorities in accordance with applicable law.

The Company has incurred, and may continue to incur, certain expenses related to this attack. Further, the Company remains subject to risks and uncertainties as a result of the incident, including as a result of the data that was extracted from the Company’s network as noted above. Additionally, security and privacy incidents have led to, and may continue to lead to, additional regulatory scrutiny.

Although we are unable to predict the full impact of this incident, including could negatively impact our operations or results of operations on an ongoing basis, we presently do not expect that it will have a material effect on the Company’s operations.

Company Information