Business Context and Reporting Period
Company: cbdMD, Inc.
Filing Type: Form 8-K (Current Report)
Date of Report: September 25, 2020
Event: Notification of a cybersecurity incident involving the company's eCommerce platform (cbdmd.com).
Financial Metrics
This filing is a current report regarding a specific event and does not contain financial statements. The filing text does not provide values for revenue, profit, cash flow, margins, debt, or liquidity.
Material Changes
The material change reported is the discovery of unauthorized modifications to the company's eCommerce platform. An unauthorized third-party inserted malicious code, creating a risk that customer-input elements may have been skimmed. No financial performance changes are reported in this document.
Outlook, Risks, and Contingencies
- Incident Details: The malicious code posed a risk of data skimming on customer input fields. The Company cannot confirm if customer information was actually acquired.
- Response Actions: The Company has notified federal law enforcement and is cooperating with the investigation. Additional technical security measures have been implemented to prevent recurrence.
- Customer Notification: Beginning on or about September 28, 2020, the Company will notify potentially affected customers.
- Remediation: The Company is offering one year of free identity monitoring to customers who may be at risk.
Key Facts for Investor Verification
- Verify the scope of the data breach and whether any specific customer data was confirmed as compromised.
- Monitor for potential legal liabilities or regulatory fines resulting from the incident.
- Assess the impact of the incident on customer trust and future online sales volume.
- Review the effectiveness of the newly implemented technical security measures.