Retail Stores
Savory Spice Shop, IncAbout
Important information
- Government Actions:Government Action: BBB reports on known government actions involving business’ marketplace conduct:The State of Colorado v. Savory Spice Shop, Inc.
On July 22, 2022, the State of Colorado entered into an Assurance of Discontinuance with Savory Spice Shop, Inc regarding the State’s allegations as to the security breaches that Savory Spice Shop, Inc detected on September 17, 2020, and March 27, 2021.
According to the settlement, Savory Spice Shop, Inc will pay $30,000 for failing to safeguard the payment card information of 13,888 Colorado customers and waited months to notify them that their information had been compromised.
Due in part to inadequate website security, Savory Spice Shop, Inc was the victim of a data breach at an unknown time between April 2018 and September 2020 that allowed an attacker to skim customer payment card information from the website’s checkout page. An unknown criminal changed a file on the server that was hosting the shop’s website to send card information to a remote server at the same time the file sent the information to Savory Spice Shop, Inc’s card processor.
In September 2020, when the payment card processor notified Savory Spice Shop, Inc of the breach, the business found and deleted the malicious file on its server. However, the business failed to implement recommended security measures in time to thwart a second data breach, which occurred in March of 2021.
Although its online policy promised notification within 30 days of a breach, Savory Spice Shop, Inc did not notify the 13,888 customers who were impacted by both breaches until July 23, 2021, nine months after learning of the breach.
In addition to the $30,000 payment to the state, Savory Spice Shop, Inc agreed to create and maintain an information security policy and incident response plan, to meet requirements in Colorado law, and to hopefully prevent such a breach from happening in the future.
For more information, please contact the State of Colorado – Attorney General’s Office at 720-508-6000 or https://coag.gov/press-releases/7-22-22/.
Business Details
- Local BBB:
- BBB Great West + Pacific
- BBB File Opened:
- 8/12/2010
- Business Started:
- 1/27/2004
- Business Incorporated:
- 1/27/2004
- Type of Entity:
- Corporation
- Business Management:
- Mr. Michael Johnston, Owner
- Ms. Michelle Cain
- Ms. Debra Gerard, Office Manager
Additional Contact Information
- Principal Contacts
- Mr. Michael Johnston, Owner
- Customer Contacts
- Ms. Debra Gerard, Office Manager
- Fax numbers
- Other Fax: (720) 283-2242
- Other Fax: (303) 477-4407
- Other Fax: (303) 444-0652
- Other Fax: (303) 364-2207
- Additional Phone Numbers
- Other Phone: (303) 477-3322
- Other Phone: (720) 283-2232
- Other Phone: (303) 444-0668
- Other Phone: (303) 364-2188
Additional Information
- Business Categories
- Retail Stores, Spice
More Resources
Featured Content
BBB Business Profiles may not be reproduced for sales or promotional purposes.
BBB Business Profiles are provided solely to assist you in exercising your own best judgment. BBB asks third parties who publish complaints, reviews and/or responses on this website to affirm that the information provided is accurate. However, BBB does not verify the accuracy of information provided by third parties, and does not guarantee the accuracy of any information in Business Profiles.
When considering complaint information, please take into account the company's size and volume of transactions, and understand that the nature of complaints and a firm's responses to them are often more important than the number of complaints.
BBB Business Profiles generally cover a three-year reporting period. BBB Business Profiles are subject to change at any time. If you choose to do business with this business, please let the business know that you contacted BBB for a BBB Business Profile.
As a matter of policy, BBB does not endorse any product, service or business. Businesses are under no obligation to seek BBB accreditation, and some businesses are not accredited because they have not sought BBB accreditation. BBB charges a fee for BBB Accreditation. This fee supports BBB's efforts to fulfill its mission of advancing marketplace trust.