A ransomware group claims it accessed systems tied to Verano Holdings, the parent company of Zen Leaf and MÜV cannabis dispensaries. Verano has not confirmed this claim publicly. The specific data types involved have not been disclosed. Affected individuals should monitor accounts, watch for phishing attempts, and stay alert for official updates from the company.
| Company | Verano Holdings |
|---|---|
| Industry | Retail |
| Data Types Exposed | Not Publicly Disclosed |
| People Affected | Not Publicly Disclosed |
| Attack Method | Ransomware |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Verano Holdings Data Breach?
A ransomware group has claimed responsibility for an attack on Verano Holdings, a multi-state cannabis operator that runs the Zen Leaf and MÜV retail chains. The claim appeared on a dark web leak site tied to the group. However, Verano Holdings has not publicly confirmed that any breach took place.
According to the claim, the attackers targeted systems connected to Verano’s retail operations. These reportedly include the Sweed point-of-sale platform and a loyalty program warehouse used across the company’s stores. Because this information comes from the group’s own posting, the exact method and timeline of the alleged intrusion remain unclear.
At this stage, there is no public statement from Verano describing an investigation or forensic review. As a result, key details such as when the alleged access occurred and how long it lasted have not been disclosed. This article will be updated if Verano Holdings issues an official statement confirming or denying the claim.
Who was affected?
Verano operates Zen Leaf and MÜV dispensaries across more than 14 U.S. states. If the claim is accurate, customers who shopped at these retail locations could potentially be involved. Employees who used internal systems tied to point-of-sale or loyalty operations could also be affected.
The exact number of individuals potentially impacted has not been publicly disclosed. Because Verano serves customers through loyalty programs and in-store transactions, the population affected could span many states. At this time, there is no confirmation of whether the claim involves consumers, employees, or both.
What Information Was Potentially Exposed?
The specific types of information involved in this claimed incident have not been publicly disclosed. The ransomware group’s posting references systems used for point-of-sale transactions and customer loyalty tracking. However, no confirmed list of exposed data categories has been released by Verano or verified by an independent source.
Because the claim centers on retail and loyalty systems, there is a general possibility that customer purchase or account details could be involved in some way. That said, this remains speculative until Verano or another authoritative source confirms specifics. Readers should treat any claim about particular data categories with caution until official confirmation arrives.
If personal information were eventually confirmed as exposed, risks could include phishing attempts and unauthorized account access. Scammers often use breach claims as an opportunity to send fake notification emails designed to steal login credentials or payment details.
In addition, if any loyalty or purchase history data were involved, it could be used to craft more convincing scam messages. For example, a scammer might reference a store name or purchase habit to appear legitimate. Because the full scope is unconfirmed, affected individuals should stay alert to unusual communications referencing Verano, Zen Leaf, or MÜV.
What is the company doing?
As of now, Verano Holdings has not issued a public statement confirming this ransomware claim. Therefore, there is no confirmed information about an internal investigation, remediation steps, or customer notifications. This article reflects only what the ransomware group has posted publicly.
Because the incident remains unconfirmed, no credit monitoring or identity protection services have been announced by the company. If Verano later confirms the incident and outlines a response, this article will be updated to reflect those details. Readers should check official Verano communications directly for the most current information.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Even though this incident remains unconfirmed, it is wise to check your credit reports periodically. You can request free reports from each of the three major credit bureaus once a year. Reviewing these reports helps you catch unfamiliar accounts or inquiries early.
If you notice anything suspicious, report it to the credit bureau immediately. Early detection often limits the damage caused by identity theft. This simple habit costs nothing and can protect you regardless of whether this specific claim is ever confirmed.
Watch for Phishing Attempts
Scammers frequently use news of a data breach claim to send fake emails or texts. These messages may pretend to be from Verano, Zen Leaf, or MÜV asking you to verify your account. Because of this, you should never click links or provide information in unsolicited messages.
Instead, visit official company websites directly by typing the address into your browser. If a message claims urgency or threatens account suspension, treat it as a red flag. Legitimate companies rarely demand immediate action through email or text alone.
Consider a Fraud Alert if Concerned
If you shopped frequently at Zen Leaf or MÜV and are concerned about potential exposure, you can place a free fraud alert with one credit bureau. This alert notifies the other two bureaus automatically. As a result, lenders must take extra steps to verify your identity before opening new credit.
A fraud alert lasts one year and can be renewed. This option provides a lightweight layer of protection while you wait for further confirmation about the claimed Verano incident. It is especially useful if you also received unexpected communications referencing your account.
Stay Informed and Document Any Issues
Because this remains an unconfirmed claim, staying informed is important. Check for updates from Verano Holdings and reputable consumer protection resources. This way, you can respond quickly if the company later confirms a breach.
In the meantime, keep records of any suspicious emails, calls, or account activity you notice. These records can help if you ever need to dispute fraudulent charges. If you experience financial harm later tied to this incident, consulting a data breach attorney for a free case evaluation may help clarify your options.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.