{"id":7888,"date":"2017-11-29T01:04:11","date_gmt":"2017-11-29T01:04:11","guid":{"rendered":"http:\/\/www.denverpost.com?p=2871966&amp;preview_id=2871966"},"modified":"2017-11-29T01:04:11","modified_gmt":"2017-11-29T01:04:11","slug":"mj-freeway-discloses-another-cyberattack-on-the-denver-based-firm-affecting-marijuana-businesses","status":"publish","type":"post","link":"https:\/\/cannitrol.com\/blog\/mj-freeway-discloses-another-cyberattack-on-the-denver-based-firm-affecting-marijuana-businesses\/","title":{"rendered":"MJ Freeway discloses another cyberattack on the Denver-based firm, affecting marijuana businesses"},"content":{"rendered":"<div id=\"wp_fb_like_button\" style=\"margin:5px 0 5px 5px;float:right;height:100px;\"><script src=\"http:\/\/connect.facebook.net\/en_US\/all.js#xfbml=1\"><\/script><fb:like href=\"https:\/\/cannitrol.com\/blog\/mj-freeway-discloses-another-cyberattack-on-the-denver-based-firm-affecting-marijuana-businesses\/\" send=\"true\" layout=\"standard\" width=\"450\" show_faces=\"false\" font=\"arial\" action=\"like\" colorscheme=\"light\"><\/fb:like><\/div><div class=\"media_block\"><\/div>\n<div class=\"row\">\n<div class=\"large-10 large-centered small-12 columns\">\n<div class=\"entry-meta-date\">Published: Nov 28, 2017, 2:15 pm \u2022 Updated: Nov 28, 2017, 5:59 pm<span class=\"single-comments-link\" \/><\/div>\n<p class=\"byline\">By <span class=\"author\"><a class=\"url fn n\" href=\"http:\/\/www.thecannabist.co\/author\/bkennedy\/\" rel=\"author\">Bruce Kennedy<\/a><\/span><em>, The Cannabist Staff<\/em><\/p>\n<p>MJ Freeway, one of the first companies to create \u201cseed-to-sale\u201d tracking and business software for the legal cannabis industry, has just disclosed it was the target of another cyberattack; one that took place about a year ago. <\/p>\n<p>The Denver-based company, which also provides tracking software for a number of state regulatory systems in addition to approximately 1,000 cannabis retailers across the U.S., also has been dealing with a string of <a href=\"http:\/\/www.thecannabist.co\/2017\/11\/02\/mj-freeway-marijuana-tracking-software-washington-contract\/91202\/\">hacks, system outages and other disruptions<\/a> over the past several months.<\/p>\n<p>According to a <a href=\"https:\/\/mjfreeway.com\/publicmessage\">statement to its clients<\/a>, published Tuesday on the firm\u2019s website, MJ Freeway determined that \u201ccertain client information\u201d had been stolen on or around Nov. 19, 2016, affecting businesses in multiple states. The data included customers\u2019 date-of-birth and contact information, but no Social Security identification or credit or debit card numbers, according to the company. <\/p>\n<p>The firm said it immediately launched an investigation and has been working with \u201cthird-party forensic investigators.\u201d <\/p>\n<p>This is at least the second time MJ Freeway has been the victim of a cyberhack. <a href=\"http:\/\/www.thecannabist.co\/2017\/01\/09\/marijuana-cyber-attack-mj-freeway-inventory-system\/70948\/\">In January<\/a>, the company reported an outage of its inventory system and an inability to process transactions, due to an attack on both its main and backup databases. <\/p>\n<p>\u201cCustomer trust and safety are our first priority and since the January event we have worked with the Colorado Bureau of Investigation and our independent security firm to recover client data, strengthen our systems, and identify the criminals behind the attack,\u201d Jeannette Ward, MJ Freeway\u2019s vice president of global marketing and communications, said in an email statement to The Cannabist. <\/p>\n<p>In terms of the November 2016 incident, Ward said the company is \u201cpleased to have recovered this file and intend to use it to restore a subset of client data previously believed lost. We stand ready to assist our customers and answer their questions about this development in our investigation.\u201d<\/p>\n<p>A spokesperson for the Colorado Bureau of Investigation (CBI), meanwhile, told The Cannabist that while \u201cthe victim in this case has indicated the CBI is reviewing this case, the Bureau does not provide comment on active investigations, or even confirm our agents are investigating.\u201d<\/p>\n<p>Attorney Mark Mermelstein, who is counsel for MJ Freeway and a specialist in cybersecurity legal issues, told The Cannabist the hacks appear to be a \u201csophisticated sequence of malicious attacks directed against the company.\u201d<\/p>\n<p>In many corporate cyberattacks, he said, the attacker will corrupt the target\u2019s files and then demand money for the return of the un-corrupted original. <\/p>\n<p>But in the case of MJ Freeway, he noted, \u201cthere never was an extortion demand. And so you have to ask the question: Why would someone want to take a copy of our data, and then destroy our copy of the data, and then upload data that\u2019s now a year old? One could imagine a scenario where a competitor or someone with interest in destroying our business reputation was doing this.\u201d<\/p>\n<p>Mermelstein said he believes what\u2019s happening with MJ Freeway could be a new kind of cyber incident. Rather than stealing data or trade secrets, he said, there might be a rival business or interested party working to destroy another company\u2019s data in order to gain a competitive advantage.<\/p>\n<p>\u201cIf that\u2019s what\u2019s happening, that really is a new front in the cybersecurity wars,\u201d he said. \u201cWe really haven\u2019t seen competitors weaponize cyberhacking in a significant way.\u201d<\/p>\n<div class=\"entry-meta-author\">\n<div class=\"authorimage\"><a class=\"url fn n\" href=\"http:\/\/www.thecannabist.co\/author\/bkennedy\/\" rel=\"author\"><img src=\"https:\/\/cannitrol.com\/blog\/\/wp-content\/uploads\/2017\/11\/mj-freeway-discloses-another-cyberattack-on-the-denver-based-firm-affecting-marijuana-businesses.jpg\" class=\"authormug\" \/><\/a><\/div>\n<p class=\"author-desc\">Bruce Kennedy is a veteran communications professional and multi-media journalist who has years of experience in international and business news. He started covering Colorado&#8217;s cannabis industry in&#8230;<\/p>\n<\/div><\/div>\n<\/p><\/div>\n<p><!-- .row --> <\/p>\n","protected":false},"excerpt":{"rendered":"<div class=\"media_block\"><\/div>\n<p>MJ Freeway, a Colorado firm that provides business software for the legal cannabis industry, has disclosed it was the target of a cyberattack in November 2016. <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[5062,6811,6813,77,5577,5667,6858,9,6833,5019,1,3,5219,61,1736],"tags":[5063,6816,6818,2655,5580,5673,6860,6835,5022,5234],"_links":{"self":[{"href":"https:\/\/cannitrol.com\/blog\/wp-json\/wp\/v2\/posts\/7888"}],"collection":[{"href":"https:\/\/cannitrol.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cannitrol.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cannitrol.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cannitrol.com\/blog\/wp-json\/wp\/v2\/comments?post=7888"}],"version-history":[{"count":0,"href":"https:\/\/cannitrol.com\/blog\/wp-json\/wp\/v2\/posts\/7888\/revisions"}],"wp:attachment":[{"href":"https:\/\/cannitrol.com\/blog\/wp-json\/wp\/v2\/media?parent=7888"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cannitrol.com\/blog\/wp-json\/wp\/v2\/categories?post=7888"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cannitrol.com\/blog\/wp-json\/wp\/v2\/tags?post=7888"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}