Share
![Not BBB accredited](https://m.bbb.org/terminuscontent/dist/img/non-ab-icon__300w.png?tx=w_120)
Business ProfileforSavory Spice Shop, Inc
Additional business information
On July 22, 2022, the State of Colorado entered into an Assurance of Discontinuance with Savory Spice Shop, Inc regarding the State’s allegations as to the security breaches that Savory Spice Shop, Inc detected on September 17, 2020, and March 27, 2021.
According to the settlement, Savory Spice Shop, Inc will pay $30,000 for failing to safeguard the payment card information of 13,888 Colorado customers and waited months to notify them that their information had been compromised.
Due in part to inadequate website security, Savory Spice Shop, Inc was the victim of a data breach at an unknown time between April 2018 and September 2020 that allowed an attacker to skim customer payment card information from the website’s checkout page. An unknown criminal changed a file on the server that was hosting the shop’s website to send card information to a remote server at the same time the file sent the information to Savory Spice Shop, Inc’s card processor.
In September 2020, when the payment card processor notified Savory Spice Shop, Inc of the breach, the business found and deleted the malicious file on its server. However, the business failed to implement recommended security measures in time to thwart a second data breach, which occurred in March of 2021.
Although its online policy promised notification within 30 days of a breach, Savory Spice Shop, Inc did not notify the 13,888 customers who were impacted by both breaches until July 23, 2021, nine months after learning of the breach.
In addition to the $30,000 payment to the state, Savory Spice Shop, Inc agreed to create and maintain an information security policy and incident response plan, to meet requirements in Colorado law, and to hopefully prevent such a breach from happening in the future.
For more information, please contact the State of Colorado – Attorney General’s Office at 720-508-6000 or https://coag.gov/press-releases/7-22-22/.
At-a-glance
Related Categories
Business Details
This is a multi-location business.
- Location of This Business
- 1537 Platte St, Denver, CO 80202-1121
- BBB File Opened:
- 8/12/2010
- Years in Business:
- 20
- Business Started:
- 1/27/2004
- Business Incorporated:
- 1/27/2004
- Type of Entity:
- Corporation
- Business Management
- Mr. Michael Johnston, Owner
- Ms. Michelle Cain
- Ms. Debra Gerard, Office Manager
- Contact Information
Principal
- Mr. Michael Johnston, Owner
Customer Contact
- Ms. Debra Gerard, Office Manager
- Additional Contact Information
Fax Numbers
- (720) 283-2242Other Fax
- (303) 477-4407Other Fax
Phone Numbers
- (303) 477-3322Other Phone
- (720) 283-2232Other Phone
- (720) 283-2242
Customer Complaints
0 Customer Complaints
Need to file a complaint? BBB is here to help. We'll guide you through the process. How BBB Processes Complaints and Reviews
File a ComplaintCustomer Reviews
1 Customer Reviews
What do you think? Share your review.
Most Recent Customer Review
Brenda W
04/17/2023
BBB Business Profiles may not be reproduced for sales or promotional purposes.
BBB Business Profiles are provided solely to assist you in exercising your own best judgment. BBB asks third parties who publish complaints, reviews and/or responses on this website to affirm that the information provided is accurate. However, BBB does not verify the accuracy of information provided by third parties, and does not guarantee the accuracy of any information in Business Profiles.
When considering complaint information, please take into account the company's size and volume of transactions, and understand that the nature of complaints and a firm's responses to them are often more important than the number of complaints.
BBB Business Profiles generally cover a three-year reporting period. BBB Business Profiles are subject to change at any time. If you choose to do business with this business, please let the business know that you contacted BBB for a BBB Business Profile.
As a matter of policy, BBB does not endorse any product, service or business. Businesses are under no obligation to seek BBB accreditation, and some businesses are not accredited because they have not sought BBB accreditation.