‘Magic soap’ producer discloses data breach, but details are scarce

All One God Faith, a.k.a. Dr Bronner’s, has suffered a data security incident that “potentially exposed personal information.

The all-natural cosmetic brand known for its multi-purpose ‘magic soap’ revealed that a “data security incident” has potentially exposed individuals' full names and other personal information that the company chose to omit from the breach notification letter.

Dr Bronner’s is an American organic and fair trade cosmetics company headquartered in Vista, California. In 2023, its total revenue was $170 million, with the majority of sales coming from the US.

Despite the company's statement that it “wants (s) to provide…information about the incident,” the notification letter doesn’t provide much detail about what actually happened.

The amount of people affected by the data security and the scope of the incident is unknown.

Cybernews has reached out to Dr. Bronner’s for comment and is awaiting a response.

The company did say that “upon learning of this issue, we secured the network and launched an investigation.”

Dr Bronner’s employed third-party cybersecurity experts, and on June 19th, 2024, the company found that an unauthorized party had accessed certain files containing personal information.

The company is offering a complimentary membership to various credit monitoring services to prevent the misuse of personal information. Dr. Bronner’s is also providing affected individuals with fraud assistance provided by Cyberscout through Identity Force.